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(54) DOCUMENT DELIVERY METHOD AND DEVICE ON ELECTRONIC NETWORK 
(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a method and a device to safely transmit a 
document on an electronic network as maintaining a document formal and to further 
provide security protection to restrict access to a system to an authorized user. 
SOLUTION: The document is transmitted from a transmission computer to an exclusive 
server by using a transmission client application, the document is stored and an 
electronic notice is transmitted to a receiver by the exclusive server and the document is 
loaded down from the exclusive server by using a reception client application according 
to the notice. A document delivery parameter is specified by the transmission client 
application by the user. A registration system of transmitter operation certification and 
its method of use are also provided and generation of digital certification to be used for 
ciphering the document and transmitting it to a receiver in a safe way is controlled by a 
transmiller. 
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^^C-JZ-St 3*l&o 7'7-f ^- h^r- l 3 3 4 ^^T 
^-bx^tltfitf, Bff^fk$*i^i#l 3 3 6(1, 
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(0011] ^"TY 7 ^^-al^-fbl 2 3 0 a t 1 2 3 
0 bfii§fl!\. ^V'J y 7*-> 7*7^- h*- 1 3 3 
2, 1 3 3 4 0WoaattMtgS:?iJfflt4^ -fill, 

- 1 3 3 4 *5l#ffit> t^feKltjfcLU/'fyu 7 7* 

- 1 3 3 2 <0£fT* f "C# h I n C + 4 0 '^'J ? * *- 
BlvftTiUa'V XAii-teCit)ST\ < fiOa 

U-y h*-Bgf-ffcl 2 10a, 1210b 
!i, -y ? *-Bgf-ffc 1230a, 1 2 3 0 b i 0 

t-teH^i: v-? U 7 1 2 1 4 £j£ 

-> x^Aic&^-Cf;*:, a-f-iiy-n; h*- 1 2 
H^ffioUtl 2 1 2^BfvftL, *i:*t*£f§t 
(^/nVJ 7^- 1 3 3 2 £f£oT->-7 U y h* - 1 
2 1 4 £Bi-SHt-t-£o Bf-^ffc^fifciSl 2 2 O^tfl 
h*- 1 2 1 4 imi^htz^iz 

stto-fyj^- ^-1240 tm\ xm^mt-t 

ZtztblZi/-? U y h 1 2 1 4 £^7o 

[0012] icm'mm^r-^ihiix^&^^^tm 

^LiiXtiffzC^o, Jffl^fcr/uf'J x'a (igvMi^ y 
fc teSitEW £ teil L T ^ h 0 r > ?;HE , 

7'<j -y^- 1 3 3 2 r WiiT Z<Di:%j£^t'Z\tili, it 
H-C-$i>tSMI-^ a 7' , i /n- 1 3 3 2£g£lt£ ~ r 

- 1 3 3 2WZ<nf:{i%il1&LX\<*&ti5tWX-&Z> f 

7*- 1 3 3 2 rgu^(t^): 
[0 0 13] teUtl^-f £t«i:, fv^^iiEWd, '<-7 
'J 7 *- > 1), fv^K^ >',:J:o 

T£E#t: J: *JlI^sn/j-!-<ozo^jI^-c-*^o 77 

,j 7 5r + -j5^$gt;?l§ai-ti:i^o * Lt^VJ y ? 
(R S A^t*4g£0^(7)^V; y 7*-7A,n''J X 



[0 0 14] flST-^ i^Lffiqgt^lSHlirv^ 

to tm £ Wii l f*3= t £ o m * * it t ^ £ Tfcmiftf •> x 

ft fllffll & it 4 fiff mfc fy * JUi£9J£« t g»'> X -r A 
tt ffiT' £ T ^ & iv, ^ coffi & fy^^fflyXfAiO^ 

[0 0 15] 

^-->3>, HTML*^(iPDF|g^(ix>^>f t# 
C7)tt4'7 0 7 7 h 7 + -A(;^ff*1*7 + - v y h ? fl/j 

7*77 h7t-Atf^7t-7 7 F^t/jjf, X* 

x Fjtf*4'7t-77 h^ar^4*^jt#, ifiift 

Jfi^n^U*- h^t-(i7x7'^->\ SQLlfiiSOf* 

7." 

IM — > L: ^. — /' — ^ 7. >* I* 7 7 -,v 1 -v 'eai'- / i n : 7 
- ? .h'ci#r;5(I"f&^^lS fHT> h 7 7' 1 J 7* — 

7'jy-y3>rt^b b iSfSr- ^> , / <- /»\ 

(I^-t-fl^Hii^i-^/j^iiti 1 ^ 7-fc-y^l-fI^jt 
CS^, itft-gfi#;i, ~ ^ ^ y-t->t:it.!;-ci?ffl^ 

9-* v hSiftmSK. Y > ^- t-y hr 7-tXfi^S 
^ii /<- v -i- ;u f> * ;u r •> x 9 > h A^g- 1 
[0 0 17] •Sfi^lcWx.bn-C^i'tfl^v <r> 
h 7 7'M y- v a >ti, Hffl-H--/<-^^i#S:^^ > 

7-- ■> 3 >li, 7X7'7'7 7-^f-C^^co^M^ L^^\ 

7>&>Mt!i<7) 7 7 F7X777' l j7--y3> t**oti i 
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y 3 > <7 > K^ii, iSfI=J > t'i-^-ofx ^ h y 

[0 0 18] A'-y^-vv^-v^h^-yy-WO 
K7i, 7 7 ,, jy-->3>70K')^^7KX^i 
& 0 y-yv^-v-v-ii, 7 7'n-y3>t7 
-> 3 ><nm~$l&$tiZ>£X<nX*i'tni 'JX hS^i" 

file* ft * = jx-^f-fj:, i*(f =?> t'i- ?-f x^ h 
v 7'^b7 yjy-ya > 7 Y > K^lS^ti^ 7 t"- v 
7 4 > K^CD-OC^:*^^ y ?7> K K7 7 7"C§ 
6, i£fiy-7 f7> h77''J7-y 3 >£fc1" 

izr^x^/^cor-f a xn[mxi)M K7 / 

[(Hi i 9 ] rirf^^C/H; * X ■? v z 

-.CUI/ /j ; Hx:i" ; -»H"C^-L 'K^h'Hj-:^ 

^i^u^^r, c u I :ihtml -f > f-7j.-;/:-ft 

Of i/£ * *l * X ? v -f X ? *i & 0 - ^ H T M L f > ^ - 

9 b y^lZftfr^HZC U I 7 7''J y--> 3 

>7Y > K^giit'7 s*L* 3 ts^> t'^-* 

-ii, liffn > \zj.- 9-^ -gffn > ta- ? Hffl 
+h-/<-^^L^^7 h 7-yM:&it£fl!iO£}±T : -& 
oti^o C U I 77*'J 3 > 7 ^ > K7ti, ±S 

U I 7 7' 'J y-'>3>^Y> K7fi, 7 ?-tX*ft/jfl 

ffl^ttBSK > ^-7x-x^S^t^A:^cof / p|g>|r 

[ 0 0 2 0 ] *5§W±St:, ->Xx£7*-bx$rlgtf>ib 
1 1 tz zl - 4f - ts [ | i : M IS 1" S IS * IS II f * i£ £ ft (ft + 4 o 



^> LTfttti-^I h^'T^, iBff ^H7> hT7*'J 
y - ■> 3 > , -ffl ^ 7 < 7 > h T 7' 'J >r - ■> 3 > , CU 

ft COfPfl v X -r A t ^- 60 j$ ffl 7: i£ *f , \h ? il X ti 

ffl#« » ^tfl#^» b ft^> b iltz\m t Jrtfxt 4 o «« 
#t:j£fIL, -E-nct ^^'7''J 7 ^/7°7 ^f^- h ^r- 
/ * 7' 'J y ^ * - £ ffiffl L X X * S: Hf ft L 5 II # iSff 

[0 0 2 1 ] 

ftr-y\ t -/:-•> 3 H T M L WL^'ii P D F $L 

.t fl^OO^'v ■ i- "7 -!• - i;;!::;T-':f 7 
•y -C i &i :, 7) };lt V 7 7 7 1-7 - i^.f^O V r - V y h 

sg^i 1 illl .t <7)-r«0f* 5ri*^ r ^ - > ^ ? 5 L tz o 
^i&t'o %%Wi<nWfi^m^ . 4>9~v-y b hX 

[ 0 0 2 2 ] TiCii^TjE^SR^x^ •;-> h 7'7 
~7 i 7 9 zL — +f— j > 9 — 7 x. — X60f|f£(i , *5§W<7) 

i o4*S/TX^ 'J->> H7 -f 7 ^ j.--»f- <> ^~ 
$ 7 ^t:ff^>[fSlf>^^^l O^it^^o vx 
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->3>2 Oittotl^M h7-7 1 8±T\ jiff 
3>fcT j.-^ - 1 4COTX? h 77°1 2^bttl 6$ 
tWiiSO-fc7 K , £fi#7 KUxa^(i$fI^T KU 
X0)-t 7 h £j§{fT-§£ 0 -S-OfilfciSli* 7-K7'n 
-t 7 X7'Uy Kv - h 4^1^77^ 7 ^7 7'') 

(It4^t^T-S4o iHt ?7Y7> F77'n-->3 

jiff n > \£*-9-tfT y* 4rx arfigi-)tixA:»Bft:i£tt 

[ 0 0 2 3 ] iHfln > fc'a- Hffl+t-A- 2 2 

6£oTttffi+*o Oy-v/K- 
k'X7'DA^ (ISP) t:tottl«?n4t-^ 

c7)Wi^ifeP'it:^^T, itfii^Y ^-^*x h h =7 > 
X77-7 , nh=i;u (HTTP) rf£ o*C!?ffl-H--><- 
117 7 7'n- K?ii/J y-"7 > a- K *) -f£o H 
TTPti, n-ivvnt V ( T^xyj ) ±-c-*f--><- 
UftiTf &fc^UfifflMi£«1t7'n ^K'*4c H 
TT PO£H£W¥IJ££fi, ^tl^ryj >5r- *> 3 > "C 
£0 7*7 7 h 7 + Li^ - ttiSo :otl 

[ 0 0 2 4 ] 2 2 (i, jsffn > fc'i- 

7 > !> 7 7'M r- > =i > ^"^-x:(g L/': T * Kl^AilA ^'x 

(J:, Y > ? - ?> y h CO fig p 4* ^ - JU h 7 > X ,t - h 7'rj 
hn;U (SMTP) rlhtfnF (f?lx.(£A SC I 
I ) A -y-t-vt LTj*fi?il£ 0 #^<7>4fjS**tsf*i] 

rl!:ii:, 7''J > ^-2 6, 7 v 7 >~ Xf%2 8 , ^ 7 h 7 
- y^-K-^IL Y > ?-^7 hSjftSISli, Y>? 

-*7 h 7 X§?f*1u Sl^A-Vt'l'fv^l'Ty 

[ 0 0 2 5 ] iiSM 7-fc-vli, ^#^^--7 + -^'J 
y-xny-y- (URL) Sr^A, fni:iot^-^ 
-<ijt*U:efi£££ i*!>4wJ:#-C#43 w<0^7-t 
-y(:C^, 5fi^7^f7> hr^'J 

y--> 3 > 3 0 SrftoTSrffl-**— 2 2 ^bl£1S5fL 
/ji»£^7> n- K1--6o $11? 7 Y 7 > h77'J t 

4 ctvs 7 <7> F7 7' I J y- ■> 3 >[:HxoT*S 



^7> h77'n-y3>(i, ^x7'7 J 7vft^^, 
^^fi^-Xht^Ih^t^, 7X7'7'77^f 

#HifeWJt:i5^Ti±, -Sff ^ 7 Y7> F77'n-y3 
>«i, t*#**a«FLi^b, Ifffl-H— deleft 

?n^i*t^^^^^-C(7)(iiJ£7)v7 h ^xrr r»j 

[ 0 0 2 6 ] jSfi^7 4'7> F77 , n-y3>(i, C 
D-ROM^b3>t J a-^-t:, ^iWj:7x7^^ / 

PJx.tf, Hffl^-/<-7'n/^ rcKt:7^7> h 
«:ifojL-^-(i, iSW<:7^7> MfST-JSfI^7'f " 
7> F77 ,, j7--y3>H^'Ji!t^:!:^r'^ 0 

^^^/j^^tf$B^t-t-^> U R LCii^n^o iHfS ^ 7 

^7> h 7 7* 'J y — *> 3 >(i , M3>t'a-y-Of 
xnv 7 , t:i*?tl^7 7 ,, J y-v 3 > 7 Y > K7*l 

ST-T^-txgii^c -8^7^ 7 > HfS^iS^uffM 
Sitii:, 77°'jy~->3 >7Y> K7^fE^*li& : , 
[3 6(i^^W^WIKtePyi:1t;^7 7 ,1 J y--> 3 > 7 Y 
> K7 3 2 wlitASo 

[ 0 0 2 7 ] 7 7 1| i)-y3 >7Y> K7<?)±g4ISgB 
i±, JSfi? 7 -f 7 > F7 7° ! J y-> 3 X^SO^J.^i. 
T , hT*)^ 7 7'J *r-v 3 > 7 i > K7 

. ^iK " 7 f r > !■* - =; - - > j > 1 ) f ^* viv^c 

TiiM) ■ ^^^oitj^'Kffe^i::^'.^, 77'n-y 
3>7f /K7!;, t£ [g ? v f 7 > h 7 7 'J y - > 3 > 

^ZEgfttg!:7 y--t X~tht^><T>* 1 > 7-JU'<-3 4 
tft/Tl-^, -f <7)fSHgCO-OC, |fi"Llw?7 7-- v 3 6 

y* 'J 7 y^ i"^ h , #f L^^ s 7 7"-->'7 Y > K 7 3^*3 5 

J: t-7^0^^ / 3 8 r ^ ') 7 

-t-7 '^ii^r 'i^'J '<7 ^ - *-Ztt-t-7'?;fL£'< 
7 y - v 7 Y > K 7 O (dJIi ^ fffl < (TiCTSSiJft) - 
[0 0 2 8 ] 4tJi*JSSMT-ii, ^ f >7-^/<-3 4 
(i, C U I tSflE^<7) f > ^ - ^ 7 h y 3 - h 7 7 h "CA 

i>t, ^--^-(?77X7'7'7 7^^]A^±£t\ CUIi: 

OflLbtf? >C0(?lJt:(i, + 777>h 

4 2, fcf'J 4 a^V-^ 1 ; X h 4 6 <T>&#9 >* f 

§JiU 0 rff^Xi, gl77^7> F77 ,| Jr-y3 
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lot, JL--f-li||Lffl-»j— /<->fta-4— /<-7 #7 

$t(-:t4fc^-t*i7 7^7 (SSL) 
<7)tM4*ig:U^^$feiHi7 9 n h u ju Soffit* jJ*5tf*«r 

[0 0 2 9] Yr> hryj y-y 3 >{±, 

7i:7 7^x^f£T-<fe£ 0 *5§W^4fiS^*SPI-C(±, a. 

F777^^>4 8 tmlRt&t, 
i:»o*C^*- h£ft/j7 KUXr-y h f^t" 

5 0(i, ^ffl^"/<-^co^TOlflRco^fi^f?iht^ 

jl?7<f 7> hryj y-y 3 >ffl^4ftin-7> Kr 

-a-5 4i:i±> yW > 7- >i"<- 3 4 u > t 

K(i^fI^-7Y7> h 7"/'J y- y 3 > amir &m 

h y 3 - h 7 M?*6 0 [23 6 >-i--:±, 
SlfeS 6, M 7 y->' 5 8, C U I 6 ()5u^^7 G 2 

[ .! !i .; !i ] r -7 r- > a > ^ V :.: ./ , 

y - y 3 > -L* 7 ■> a > ^tai;:Pjf|Sfi? .iL/j^-Ct/) ^. , 

*r 'J 7s hf^T^^ y y-y "7 ?>- y -v-- 6 -1 ; . :\ . ■ • 

y-y 3 >-t y-> 3 y^pfljirateMi^-co -c;^ 
f J'J x hS^t^77''jy-y 3 > K7^;:-.: 
fcit&x'j 7&uL7 -r -n> KO-fc 7 hXSbh, W»' - 
7 <r > h77 ,, jy-v 3 >ri ? ftfiji:3:*>±if ■;. 
/wy-y -r^-v>-7 r -ju Kii^C'to 

y-y" -7^-y>-C'J X hf^ii^.:. EITii, 

^^4fa**SMi:K6jt»ft*7 2 r*i-77*v y- > 

3>7^>K732 (DWMXfoho *<-/ y- y "7 > 
-Vii, £ fl#6 6, b 6 8, j*ft<7):|*S7 <* 

£g/T-f£o Efi^ttSUi* 7 7 7'n-K^T^L 

i^gsv^^t LTti r^jj , rxv-j , r^>y* 
[0 0 3 1] &m¥M^imwm<Dm:m-z 



^'J 77t^h ^Wl§£&Pft^U *<7)ifffc 

[ 0 0 3 2 ] flfL^^v y-y 7 i > K^rtT 

^ 7 y-y 7^r > K7-cBa^n, 7 i >y<p<D 

/<-y y-y 7 Y > K 7 7 8^II^$)^ C ^' y y— y 7 
>f > K7 7 8 i:Eot, ^--tf-fiitiiW^^w ^ - 

fifL^/^yy- > 
K 7 ii. ^jifi'yf - a - fci > L 7 - ;u / <- iURi; iot 
7 7 'J y-y 3 > 7 ^ > K*)35^7^-tXT'll> 3 ^° 7 
y-y 7 1 > K7{i-t-7'*fU f^r-BS^ii^c 
^"f-«tW7 7 , 'J)--y 3 > /J>b;5fl? 7 1 7 

> h77'J y- y 3 y^-%M^yk\% (ePBiJ) -t^B#^. 
T\ '^7 y- y 7 < > K7A J Ba^il« 5 

[ 0 0 3 3 ] &^cv^»;gft^iS;;;i, t» 

"j t s i * , ; j ?^aF i*h£ 8 F )t ,s(i, j ; ?t 

I . •t-7"^ : 7/-^-96, jSH 9 8 (7>t* £ Jiff? 
«f fig -r- ? > r^/u-ei^.-. ^f^co^jtcWi'^'Sflf-S 
■. .:j ^ — iu 'j x h^f^^h*n/:it*o*C i , /?-/y-> 
" ? f> ^ 7 co [ T o : J 7 < — ;u K 1 10 
<: ,> ^ 7)-Sff t /-;u7 k u x , gij^, n 

^ !• :: J: o Ttg^ 5 ti%itiU£b -h . 
SU* "Tu :J 7 i -/u KU7 Kux SrfT^iiti*, ft^ 
■ i :;. jL-4f- ( j; |"To : J -t'^> 1 0 8 r^'J y 7 L 

[0 0 3 4 ] ^ 7t->W7vx^ Mi, ^"7'yx^ 
h 7 f K 1 3 4 tlA^Si'Lio ^ y-t-y ifls(±, 

> /t->7 < K 1 36 CA^J^iUo -H-ry x ^ 
h 1 3 4 h y^ y-t-y 1 3 6(7)7 < -;u KtiPSSiigiR-C* 
A6 ^^n^^ffig^JfipiJ^iJ:, 7-7'yx7 Ki, ST- 
^-^jifijEn^ 7-t-vfc ^'7 >o- K^n/ji^C^I" 
6 HTML #y< — ^— y ±.USUi&o ^7-fc-y(i, 1 
i 1 * - )l)§ft\{Z<D&f%il&o ^ 9 y y- y 7 < > K7 \Zfo 
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Z>lCt7 < K 1 12 CffioT, i-^-li, 

ft £ i** f hVv 4- a-c* o r «, ft £ t 4 h a* t- £ 4 0 

3>kfi-^-fX^ h -y -ffrhTy**) y - V 3 > 7 >f 

fciSfU /<u ^'7 ^- * -\zr 9 -t*ir htzftmr 4 
n ><oM*i>t::St#£* 'J 7 ^ r > k K7 7 r*c-§£ 0 

[ 0 0 3 5] ^' y^-y^z K-)i:*4J:t't^ > 8 
4«*?';-y jSff#ti, n- 77 ^£0^7 h 7 

4 0 M'-y^r-y^O K ^ 3& s i#ftj£ 7 7' 'J V - *> 3 > 
^b?l^?i'U t, t#7 < - ^ KCIiift^tzJlfiE 

<-^Kl 3 SCffiot, JL-- *f-(±>'OS^7 + -v 

II 7* 7 Y 7 > h T 7' 'J y — '> 3 >(i , 7^A'<t'J 
x>rft"Y, PDF, f>ftK-7^, HTML^)fl4' 

-ynryj^-y a >Ti^i£* ft 1^^/ 

7 7 h 7 + -A-C^^aJfg^fai^7-7 , nr 7''J y-'> 

[0 0 3 6 ] &/r<7)E*M:ai±, PAil Lfc&{f*7'->3 

>fi, 3S#^Hyt:J.-¥-* f fE5orte4f < 7 * ;u MS: 
3££*ftT^£ 0 tilgti, A'7t-y^ > K^T-a 

;iB'. f S\ ft*. ^B^uS^;SN^ r Mt 
^ ! S;.';:rirT^'i-o .: h #T r« £ iSvt^ij . ^r^ f 
t| J -ij- - / < - iifj f^7fT> MiKo'CMS^ii': r ? : ^ 
i^f^. l J 7 xx KSI»7 i- -)i K8 2 ii, -f fi-t 
C, 1cm' mm l < Ht~fr t n r tt©t 4 »( : 
fEt£*M:ft«J*ft*o 'J httigii. ifrScfc!; 

-c iiiR ? n tz o *v wi s ft 4* o o t ^ ? m%t%m V 

1 rn r l o lUffcoT, f£ffl#li, SSSitSSf*!!^ 
: £<nm * 4- u ^ StJSjeI* 4 - - ^ § £ : - ft ^ co u 
^'Mi, F&^^^^x 1 !- K 1 0 0 

*riai-7$>aS^(i^X7- K 1 0 lonm^'^-t^ 1 h 

^i:S S L<7)figffl£g*1-£ l 0 6 b^^tz&bffiim 
»«fSa^*^ *> Itflt-e # 4 3 ^ — F - ^111#t: S S 
L*)1$ffl*-g*U iifln > ^-y-fx^ h 7 7'i: 

[0 0 3 7 ] < -JU K8 6 i:Kot, »f 

fx 1 0 B^tttz, r < 7 + ju h tB^Ltii^o 



il*Q7 < — .K 8 8 «M$;Ui\ jL--«f-li % 
7 p 'Jv--*> 3 >Tt<y> h izm'MIr *> l ) * hfrhmMM 

4 0 'J7 1/ 7 *> a*'^ > 1 1 4 li, #ffl^-^-±Oft 

Sron' «j > K'j x h ^ftoT'J x h £ ! J 7 u y •> 

[ 0 0 3 8] -Bj.-f-^/r y7 -y^ < > K7Cf 
t < - ;u KWB^^iE L < kt) & hfc«^<0 A, 

i : es a 1" 4 b# £ t\ jH il <7) y> ^ f$ ?f ?'H : a a b n 
ho 7 KUX(i£f RSrOn-TjjbT KUX7'y ^ hft 

^-/<-C^8i:7 7 7'a- KSi'i^o Hffl^t-^- 

[ 0 0 3 9] SC&Ml^^TL/j^'-yy - < > K 7 
(i N -t-7 J 7*-A.t'^>9 4rgoT^f>t^S^ 
(H-rt*Ho t-r^il/v^ /y-y^ ^ > K7(i 
& Tit ffl I" 4 ^ ^> SSM 1 1 ~ t T ■ * 4 . -t- 7' ? ii 

ii, l&Vg?H/':i^lMt7'> 3 >, TKUXUXr/iJv' 
"Sc^iill^ ^L^7y x 7" h 7-e-vr&v^ 
"j /i / n -7 / - ^ - r -t - 7'T ? 4 -r 'i ^' ') ^ 7 ^ - 

^-^t-7"t^i;ii, j.--»f-(i-t-7'/^7 ^ - ^~ 
.fy>9 6^'i 7 7-f 4o ^'-f rn 7'^" / ^ jl 
-¥-(:-t-7-l-&f--'J M-'j /<-/ ^ - ^-cnt^M. 

[ 0 0 4 0 ] -t--f*iitzT 'J /<'J / <7 ^ - 9 -fr7 K 

7* ? tz T 'J '<'J ^ - ^ ~T ^ 3 > JtC 7 'J 7 7 T 

tei^o -t-7'?iL/jf-' , i^' , J^ 0 7^-^-(J:, wOt* 

C'S{I#Oif$^CO-t 7 h^C7y|fffl^-JU>a - V t LT 

^MttE*iW±ii|gg-C^4o ^T60^(f/<7 
1tt4fui:^°7^-^-t^M^IEL, Siwi^ y-t- 



(11) 



[0 0 4 1 ] •k--f*tltz7* l )'< l )'<y 7 -9-tfT V 

7-f > K^tJ^Ko ^-7'?tU:isfit7'y3 
fcrt^y y - v ^ Y > K^CfdA**!^ itf^iiife 

fc-r U '<>j '<7 ^ - 9- £B8 < i^'v^-y^O K7 
< T7 S, J y--> a > 7 K7 hm<o -fc-"/ 

-7' 2 a/:'* 7 ^ - 5^ — Sr Afi#x.£ri\ sS^fiil'j & 

4:hi:J:otKffJiU 9 

6fti:fiE*ii*o Sli#(±. ^MCT KUX'JX hS:& 
/ut r -^4-^o/jmffO-t-7^it^r 'J ><'J '<? 7-9 
-jit KUX'jX h£fiDx£-£^-C££e ^^-v 
7 Y > K7coh£te(3 ff< 7 + h h LT<7)K^ £-fc- 
7"-t^j .t7>1 l 6 ^ftoT-t-7'^ii^; 09;^ 

|; i^Pi i^H - fc£'SfSft7 i > K r " '>sC;r^> 

0 -J;..; :1 'V f > v 1 i S :t , " r v > v " • i-V- 

1 Afiij'^-fVi c U/J > - ^ 'i X ti' ^ uM'J I'.'Mik"!" 

^ /: ^ > I : Mi HI * a £ * % ^ <r> kt f Si ( ?ij : : h * T , 7 ! 
;U '/7 > > x — 1 2 0 CfKoT, x.- a - 
;ur Kt/X7'7 ^ sKvwi > — ;u 'j x H:#>&t Kuxt: 

THXt^o Miff, yj^^/^-a-!:*/^ 

- 'J X h £ iiJR U l ) 7 U v v x # 9 > 1 2 2 r ? 'J 
•y ? + & i , jSff ^7f7>F77'n-->3> 

] ) X hCO^fft^'J X hf-ym 2 4 C A^'C < n 
-i))lT KUX7'y ?£jg*?U 'J7u7va^y>y 
? 'J 7 y-1"£h, iM^^-f T P^t'}|$?i'Lfc7 KUX 

7' y ^ h <n r k u x ^ ? v x h -t- ■ -y ^ x t: a o r < h > 

[ 0 0 4 3 ] 'tfl#<7)7 Y > K7^Tff1^il^Si:, iSfM 
^ 7 Y T > h 7 7 5| J y- *> 3 >[±WLH9i:Bf ibii/:7 K 
UX(7) 'J x h £S?F"t~6o 'J7ky>j.ri"J7)t« 
h, jfiW'S: v-Xji^OU X h SrjiSilWU'J 7 U x -> j. 

iSii^ 7 -f r > h 7t v, j ^- •> 3 >ii, t7->3 
>rt>-t7 ■> 3 >^c7)f^77T^X@^isfto^^t;fj[plji 



-ii, 'ix Y*-j9Z 1 2 4*^Si«riS«?L, '£Mt 
> LT<Oil«;«:^I£t&fc^(: FToJ ^£0^'^ > 1 2 
6 £?'J *y *1-£ c *^WMta*tfeMT'(i. n> hn 
U y ^(ifl^^JlgcoigK^^Tfi^: L. •> 7 h ? 
'J 7 ^liJSi^SSHt«|Rt4 0 *fi#ii, 
9 7, l 2 8 ctt/^Miio §fi#*' v ^x 'J x h t: 'J x 
hS^^n/jtfltii, Bi]Sfe'"K^ > l 3 0 Z9 'J 7 ^1- 
-6*^^(1*-+'- K^'y^X^-X^^Lx'J - h * 

[ 0 0 4 4 ] a--»f-^ TOKJ #9 > l 3 2 £ ? 'i 7 

- v7 < > K7 7 8 CO FT o : J 7<-^Kl l 0 Cf< 

iwjx f;x h : j Ht^o 

/N°77--y'7Y > K7(7) TTo : J 7 

ft IE a ^ ^ ( i: ffi ffl co ^ i : Bdii ^ v i - ^ l : lE'lfi : ? 

'J v-- *> 3 > > ^' y y - y 7 ^ > K7 j^fln > tf* 
i-y-Wf'X H7 7>b-E-*ib $rS"tT >f -a > (E| 

[ 0 0 4 5] 3>7^ab-y3/i-f-{>5'- 
7x-xii, i?f§-H--^-^iEliPf(7'tBL^x ^ v i X 

9-77.9 h 7^;^?*l-&CU I 7 7'n-y 3 > 
7^> K^liat-Tn^flio ttOi:, CU E ii, 

h T "o *C O 7 X 7' 7' 7 7 + f 7 7'J y - ■> 3 

r i'ii L " - : ; - In I i] 

pijcin^c u i v"7 ; ; 7--> 3 >7 v > r ri; 1 i * » c > t ^jt 

\\i\V£>>l •1^^^i^> / it;^^^!?i|"c^, CL ! i:i, 7X7* 
7r7 -fii F!-J 'JI^l-H^— L 'i X ? v < X"t 

y:^HTMLO^-7x- x vh -l - Z<r>tiT M 

l i > ^-7i-xi±, i»isff, itiis, "itiSft 

tt77> M:P^^li-^ti^^OT^-t:X. jtSiUj-j- c * B8 
1"^) t: 'J > /^S!, ^ - 'USE* 'J x hoot>1^0^^^-^ 

V J- — ^ *£• ft Ll^Q; 

[ 0 0 4 6 ] CUIli, x-^-h(£^H^T 77 7 > 
hcOSCJ:o-C, S4-%rSH6^-t H SrilfftT'S: 10^ 
CO T ^7 7 > h ^ ^ 9'- s 9' IV - 7*7 77 7 > h v > - v" -V 
/^-7V >/<-(i, flA^USi:^ -f > y*-7x- 
X^lt, fl^^-ty hoor- 9 [IT LSf^i - ^ 

mmztih-, ^Kw^ofttii^ifipii^ii, ib^cott?^ 

> h h ^^-7 J 7 77 7 > h "7 ^- vt-ii, ^ 

■c^i£fthr^7> hi:ra.li"^^ 77 7 > HSffi^r^ 

-tXT-^^o T77 7 > h^^-v-V-ii. ^ilKT777 
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[ 0 0 4 7 ] T*^> h-7>--»-iilC, 

7*7 y h tft^atrtai-s- t* f E^^*ir^4 0 

^ ia^^'7^-vl4 2, h 7 7*>y**l 4 4 , 7 
7^7 ^ > h 1 4 6 . 'J > y" 1 4 8 , ^-^'JXhl50 

flgti, tflfco^ >f >7-;u/<- l 5 4 i;*>SjijRnrSg<-K 

?>142, 1 4 4 , 1 4 6 , 1 4 8, 1 5 0 t LTfl 
SJiitt^o HI 0[-&v>T, :o^>7-)Wi- 

H:£i*iT^& 0 L^L4^^ftf^tfePij-e-(i, 77' 
'J 3 >7< > K7^fS&!j:g&o/:Jet:&oT^ 

[ 0 0 4 8 ] 1 5 6(i, ±gfitgf*n:& 

tttt^iiT^^o EIlOCfc^T* SZ7-/W(-(j:, 

Z7-^A'-ts«:-5 7? ft t: ffl* t ri f r- * 
CU I 77''J y-y 3 / ^O 1 4 0CP4I1-6 

KUX l 6 6 > t7'-> a > 1 6 8 Sratv feT^il^ 
!'H Jlj C L r I T 7"'J ^->3> ; 7 i'/ i'v:::^ 



a-16 2li, CU I crfli-^t*f^±^= J ^> K 
[0 0 4 9 ] SSftfigli, i*©?7>f 7> hr^J T- 

51 W Oftt Jl^JfiM "C' (i , -t - 7' * T o & x 'J / < 'J / <y 

-v 7 Y > K^^tBT < 01 Ki, * y *^<7)fcbSf[ 
it§W:f££CU I ^-v7 < > K7 1 7 OcOlE-e 

2 i:ioT*Mi5o 



[0 0 5 0] Br^OiS^o/jrtc, a-tf-ii, TT 

0 : J 7 < K 1 7 2 i:$fi-Cfeii![«:A^T-££, ^ 
-A/'J X h & , 7'n^7 >^-a- 1 7 4 

£ 0 i-^'-ii^ -E-jxiiioT^-'U'JX h £E"C, 

n o : J 7 < -)i K l 7 2 i:A^*tt/jrf 

K> ^ >*jt^a/x,T-^C*^^^ (Mi if r@J ftfch 

(i, f7'v"i^ h 7 -r - K 1 7 6 h ^ 7 -fc- 7 < - 

* : J 7 <r -M/ K 1 8 0 i#<7)%S5i:, f^3tt^ 

^*f^ 0 ft >C»(i. 7'7^'-fy> 1 8 2 'J 
•/ y- L, n-y; ;UBgiW±* v b V - 9 7 1 Is 9 b l ) frh 

[0051] te^oi*^^(st^c(±, sf§#(± ri 
ho Ggo<7>jejp r^cf : j 7 < - ;u k 

> K7 h(5]fS(7)7 t-77 h ZMtb 7 Y > K7 (Elf: 
^'ffi^^n-So i^)CU I ^- > K7 

1 7 OUKtZA^^tlTi^tMIii, ffL^7-f > K7 



1 



fiiEL<£^**£\ *^!ii7-^-y (EI/T-tr-fj 

Jtc07t-'/7 KrfiVEU i»r«^t^W)^t 
c£ i" ^ T 7 1 J y - > a > r i _h ( f h ti ^ -t !I # 7- v 7 

[ 0 0 5 2 ] *5feW<04fiS*tiWt fc (i, CUICii, 

(|)71'7> h77' , Jv--V3 >0>SllT 7'"> 3 >C0?Ei 

>C(i, t7'y a > 1 9 0 r 7 'J 7 ^ LT, C U 

I f/y 3 >^-v^P^tt(f7^tX'e?^>, [1 1 2 
(i, *?£WOftfil*iSMi-K^CU I i-7'-> 3 >^-->' 
1 9 4 <7>l!ffiT-*6o foaityya/Cli, (fjfeW 
1 9 6. 'J ^ h SSE1 9 8, it£xfj2 0 0,7 
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T/Fryn-ya / K7^ A- 7)^ (£?IJ 
ffl-C#&W;^ i**^7'co»&t$£^ifly*7 

#OSO#*-C(OAiS1I?ft&o tt*«8fiSffi2 0 4 

as«a i: Bit fkfftt H" 4 o *£9J*>fttf?E 

JfcWi, ^i^b^lmaj^Siat* V7 HX777 5| J 

[0 0 5 3 ] C U I i-¥-l±, -£fI#^'>C#(:7y*-fc 
xl-^/j^ctffitL^tttUif^b^^^^^- K2 0 6 

2 0 8, Bff-ft**2 1 0*fi£U 2 1 2 Sr-SMII"* 
cot: SSL £g*-f £2 t 4T-$So '<*7- K(i, * 

* ? n -6 « : t n ^ -r «t u ft ^ mm\m \* * ^ ? ttffi t 
ho m^\txmmm i oa f s«?s*ifca^4i-- i f- 

£ 0 £ 'J > ^3- 3 > 2 I 4 (-CficoT, 

v'i-^T-^ltSnffi^Si'i* (HI 9 #93) , rtf'J 
✓ ^n- KJ t*x h 'J > 7(i, j- — -»f — £ C U I fcf 

■J ■> a >i;3g< ^.--f-fi, -rjfLC^oTt' 

X 1' 7 t iu hu'-ii-i^S^^^ fC ; J C 4iU: : ^iir- : i:l-v"" 
7 t it h h L'C-fc--/2 1 8t^:i:i?5o 

2 0 vftMLX V*) < > K7 1 7 0i:rl£. ; ;§ 

m#9> 1 8 8 «r5"J -y ? 1" 4 > j*ftA*Bafts * it £ : it 
8M:ti, SKO* -f >7-M,/<- 1 5 4 
> 1 4 4 A^T ?-fcXDrftgT-*>£, ilW^-^tti!^^ 

t i] ^ > hfrhmt*tifzy*tti-^^x cots ^ ( : Fl L -c 

COCU I f- y-^-X£H3£t&/^;i:ftfl]Ml£, i£ 

^^^1,3 -f'— 9 s< — t^t — -ft i y'li , jiioiOrSco 

^p[]i:f££C U I + 2 2 2<7)HS*C*) 

& 0 ISZ7-^/<- 1 5 6 7^cD£Z^y-y 3 > 
(i, a ?*2 2 4 , 2 2 5, h 2 2 6, iS«? 

2 2 8 , ^^7 9 1 5 8 Sr^T^-Sc J!fiE<0f£f£l 9 
2 , 2 2 5 , li|5l-T-4>&o > > 7-;u/n-U 

T'J/oja^' (@**-f) i: LXT 

[0 0 5 5 ] 7 ^ 7 > h ?)l--7'Tii 



7 > h*^Mte?U^^T(Oi||f+(Oji»*^BK-*«o 
nfcSfi-<7)AiIBr.^5rHET-**o f 'J /<>J n^c07 + - 

v-y H± h7 7^>rjg^t:^^TJi^?n^ (d i 4 
#?.?.) o ii^?aA:7 + -V 7 Ki, f"J A-ij o^'h h 
7 KOffi^cfiJffl^iiS (EI 1 5 - 1 7 

#PS) c $56^c04ti8*j5ftpiJ(i, ^-•ff-^^SiiCOS^ 
i ± CO fs <7) n V s< - > [ : r ^ -fc X T- J 4 1 * ( ^ i- ^ y ~ ■> 

□ ^* ? a tz <n mt<o Ji/T t : i: i : f ' J / < »; a ^* : : 

ttati'it^co'J > tmtl-f, > 7-tr-y «r^t- 

6 i;A-5D^2 2 4^'j7HtF77'l/^^D 
[0 0 5 6] ^-f-ftSgCfitoT, «f-(i, itf^cO 

£T<7>«i»e9*-eSrS TANDJ ^--f^^JTt^, * 
a-f-f>y-7i-x (GUI) li, 

^-I>, ft.lfiO-H--^nTg|£7 < -iU KCOy 3 - h 'J X h 2 
.■)(».,. . — ^ .-fc'J- 'J ^ - ^ • ■- 

^-ii K ^ { > Srf$ot:^-^-e|t^: 
[ 0 0 5 7 ] r F r o m : J 7 < - ;b K 2 3 4 C t o 

-f^T'^-. r^7> F7^-y>li, y"ti$r^y/ 
— s.-fr-'h * > ^ - ^ 7 K u x r iHR*r£ , 

7';u-7V >y< - bf[§*cOT^ 7 > h ^ ^ — i-it L . 

bK-**o T^x vx^ h : J 7 y-;uK 2 3 6!:io 

-l--»f-(i, JtOT7"yin7<»^Kt|0 
tt K«rA*T-**o riff : J 7f-;u 

K 2 3 8 Ciot, jL-^-{Jt, i»£~CT*X h-H— 

^ii^-r ^ t «!> !:i * u x h ^fen L ») -e $ *o 

[0 0 5 8] rSSf-^ : J 7 K2 4 OCJo 
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^Ito H7 F^^> 2 4 6 ^'j7n^i:, 7 + 

7 + -AOTSBC** rSiit^i/a >. . . J <*K? 
> 2 4 8 'J 7 * + i-^-UL ys-F'iX 
M>b<0£T<7)7 -f K£&&\ *D]-g££7 * - 
;uK<o»Z, K'JXF (H/T-tir-f) 

^ hizit'k<Di><otf$itiz>o ^ ] ) >yz- K : 7 < — 
Ji/ Kctot, a--«f-(i7 p ;uy^>^-a-i:**f 

[0 0 5 9 ] rse*tt.@:J 7<-;uKCioT, 

-(i, ^TEii&B, £flBfr, *■/-*:-•>' 7 

f-^KH-ft^:tit"^o Ji 

hi 1 4 (i. *%wmmnmuzfc&c u ni?* u 

i:j:or, i--»f-(i, It7 + -77h 2 5 2 SriH#? 
L/j0*^(±SrL^7 + --7v h 2 5 4 *-te*L/jO"C 

K)7i-77 h H f!P*>^*7 * -"7-y 

r !mS$K F (OWi~tJfi\ &7t-7-yK PI '11 
frfi 2 5 6 r i'az^T - - ri f ~C h ; i> . h\\y. . . - 

2 5 8 , xii MMOWI - ' 
^T^S^Anr-rSii, a- iiJffi^.t. -: .: 

y^7D 7'(i 'J -fc •/ h +* 9 > 2 6 4 £1$ o T 'J J J ■ r * 

v y h 2 6 6 T^'Sfl^WrJiiS* U h OUST: 
&o HZ> ;m, 

2 2 6 Cffi^^to it»U*- K*>g$tft£:J:, r 

^ ft^Wt:fc^T, i*ft(i, PUii^fit^oT, 

ii, ^xht^> 2 8 4 ^'i7Ut7nx^L 
£o *m*gftil»l'tf- Hi, r§ft#: J 7<-ju 
K2 7 OC, #giJOiHfi-co»-f:fi#<7)feW 2 6 8 CO 



(. . . ) *\ &mi<o;X(:ft£o ^tt^-ffi 
r$fli§^ : J 7 y - ;u K 2 7 2 t: 'J X h 

?jfi, rias^ : j 7>r-;uK274 

«gltS*i4 2 7 6 , 
[0 0 6 2 ] Uliif. [U l 5C/T?it^fttftfi^iSf+ 

ii, r^rvx^ h : j 7 i -)i K 2 7 8 

ix^Bftli, TiSfl : J 7 < -;u K 2 8 0 i:^iLti> 
^>ttC 1 9 9 7 ^-1322 BT^^o il»U+'- Hi, 

ho £fl*2 6 8 "j ane@i sp. com," 

<7)^^' f-ffl* : J 7 < -;u K 2 7 0 

SI 6(i, *5feflOffjg*igf?ijUtK^«*7 t-v 

IffflilBfU^- h 2 8 2 ti, r^fl# : J 7 f - K 2 
7 0i:l^(7)^ft^(@^^'Sff#$r , >'X 

T'Sftig^ : J 2 7 2 7 f -)i k&c/ nai3^ : J 2 
7 4 7 < Kfi, ii^^-Sfl^^gf+rii^^a, 
ft^-SfiL^iff^B^'JX hft^l-^^ Mx«f, [HI 6 

[ 0 0 6 3 ] $<s*if»®»u*- nix, ^ro^- 

: Nil T.'i. ;L" ilJ i'*>%: /^'^^K ' m ; :': v - :: : / 

- 7 r -"/■>* i- 2 8 6 ^ ^'xU? S'rif 3iijLitt^; : U -t- — r 

.■Hi :h: >'/n-K7-r-77 Hi, ir' > ■/ 

- - r 2 S 8 rK^L, tf'J > / a- OS 
■^r^ai-* 3 CU I T*7> h'fflftS^ii, Tr^7 

> H I 4 6 h^L-C-C*^^ -f >7-JU/<-^^ > 
^•-,PIffl5]-HgT-4>-&o T777>hH^(i, ^;u-7'Tf; 

> h v ^ - v> - , IB?IJT ij 7 > h + ;u ^ - , ^ > / < 

-- T 7 > h )l V~(T)W^ T i] 7 > h <7) ? -f ^/iO^ 
-^-c^O 7 * 7*!: J:o-CSffc-t&; -H--M'- 7 7 h 7X 
";J:jl-^-coT77 7 > h ^ i 7 , «rlSU.L, iiffliiSffi 

[ 0 0 6 4 ] ^rT^-X-^-ii, Tt77> h / <7 > X*: 

ar*7> Hfffi^EACt^T-l, fcoM i x7-K?r 

^ni-r^^ > ii?^^o i^L^b, ^ju-7*t*^ 

> /c-cogr L^TTJ 7 > Y^^Xhhri^X^ < , ^ 
7j 7 > h v^- >>-CS^^lA:$I7-iW<-^l 

:tt'r-> 3 ><i, fli» : 3 o 2, / : 3 
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0 4, / W<-iiJJD : 3 0 6 tOfJK'f$f££aA,T-^& 

mm \ 8) o ««i^-> ? da^f) u % nffl^-- 

[ 0 0 6 5 ] • 7*7 > h£ 
•ftfSBft 

7 # 7 > h 7*- t -(i, ^ > /<-^- ■>' (0tf-£ 

7 ii 7 > h * ju $r-1f $U:ti;£0 4 <7)#£ til h 0 

• v * - y * - £ 

• £tt* 

- 7 K U X 

g;£T#7 > H*ffifc7#7> hv*-v*H«ffiliffl 
[0 0 6 6 ] /JU-7'7^7> h/«X7- Hi, ffiffi^ 
Kt*gco9f Lwn'x 7- K£a# L, SfLvwN°x7- 
? ! J y * LTtrU^'X7- K^tt^l"^ Wl^ifeM 

r-^K:i"^7> h cofj-fft n iir K71~v ~^7> 
:: r )$5:'h^Oi^;^"'-v].->-v---;; i =; > ;-• 

rtt-flt-T-s - i: b ~? ? ^ y v-i'i, ffi'%i'^-> 

^ >/<-t* + x h 7 > ^ -r ^ ! J -/ ? L, aS ! - i :±§l 
;.; v - ;i/ y ?- 1 5 6 (ft&ft * > 7 <- \Mi r M^iT o - r 
i: J: ot> >/<-o»j x h ^l^tre^o: Ei 1 cS 
(i, *%W^4tja**fePiJCtKS^^-7'7^7> hv* 
-'>**-7tf 7> hffefr* >'<-7^ > K 7 2 8 8<7)E 
ffitASo &£f^£$J~c;i, v^-v>-ii, 

[0 0 6 7 ] >/<-^-v(±, ?';U-7'7^7> 

ho^mj 2 9ot«&a3»^s^&n^>>/<-a2 9 2 

-V~£a^, ^/A-7*^>hg 2 9 4 , * W<-£ 
2 9 6, ftf£Bft2 9 8 , ft&UT * -fcX SilfcB ft 3 

o o «rgi-g-c^snSo > 'J v 

/ >*i-\,l=fthT KUXjg£5flT^& r^-^ 

• : J **7 7* (B/T-tir-r) A f ttJ-C< 4 a 7*7> US 

'J y ? + t UffioT, "7*-vir-ti, 1@*<7) 



<i, ^U-7*7*/7> htSffi^- V h[5]fl4-7 *--7-y 
h£M >/<-Tii 7 > Hf»^-y (@^tfT) CSS 
?n^ 0 >'<-Ti3 7 > bffi^ii, *tOi^Ja 

[ 0 0 6 8 ] • ^-7°7#7> b 

• fMcBft 

• ilfft7?-tXBtt 

• m : f^-7U7 KUX (^*dTI&) 

Sf^ fl X7-K^50Bft (m^^-r) t^^iUo - 

7 h (EI/T-tirT) (±, W.mji:Id'H^ti/"dfl$R^?l7ct ■ 

[ 0 0 6 9 ] ^ y^-Ti) 7 > Hi, ^>/<-7#7> 

ffJF^-T^ C t^T*#4 0 Tii 7 > h lrgi|P^-f » 
ffl / < - ti , ^7i»b ff ^ ftM ^7f-y>- 1: j§ a L 

7^77 > h^^S^iifJI^^n^ lfr*n^&^ 

^ >/<-7 > K7^jt/T*il<i>o IS 
- v-;u/<- i 5 g i:^^>jit!n^ > 'J > 9 r ? 'J 7 
)t^;hi*> : i ^/'^-r iti v ■ ^ J; >- !~ 

7t-iii, ^ > '<-# v j|tin 5 ?L^> //U- 7'T ii 7 > h 

[ 0 0 7 0 ] 

•^>/<-7^7>h4 (V^-v-V-t: ioTf^fS; 

• 

• ^ >/<- co^T- ^ -JU7 Kl/X 

■ /<X7- K !5f/ffiE^X7 - K) 
illJU (EI^-^T) ^ ^ 'J / ^i"* rl/f L^7^7 > h^' 

h 7 t - A £ ? 'J 7-i"^o 1I^C7)T7 7 > Hi, 7^; 
7 > h^7U/-^p^^T{i^*^-7V >M'-ttLti» 
4*^C0T\ f <D^\E^<OT i] 7 > h /-ii, ^> 

5 6(i, tl« (El/T-tt-t) t^^^ (l/Ttf-f) L^b 
/v-e^4*^o 7^7> Hf»^-y^b^^?m»tSI6 
ii, >/<-?i^(^^T(i, yb-y'Tii 7 > h 
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[0 0 7 1 ] > >A-7£7> h+;u7-(i v 

i:^^-/ (0^*1*) <0^£t*A,tv>£ o 

^-;ur Kl/*1f$ft£«*t&Ci* f tH<7>*t-# 

So ffibli, Jlff<0^X7- KhSrL^v\°X7- K£A 

L^L4* f bft#*iSWCi±, *>><-ti* T # 7 
> i^<0^X7- K££St*Sfi 

itt£>s 0 

[0 0 7 2 ] * <(>v-fr'<-l 5 4{zt>2>W 
*>14St\ fcfU >73- K*- KSSi 'f * 
lit£t:7^-txt£So k'M ] ) y^th 

is 5e*3ttfcfc: 'J >73- 2 0^'S^Mi 

So eh 9ti, * 7 &m<r>m%%mm^\&h\£') 

K7-T > K7 3 0 8 <S9lDiiT-#> £o SZ7-;U/<- 1 5 
6±^tf'J >^SZtt>'-*>3 >ii, fc: M >73 

- K3 1 0, itJJD^- K3 1 2, -f Xft/£3 1 

4 , i >-f^^3 1 6, iIJR3 1 8, ^7°1 5 8 

^^-c^-s a 3- Ko&axtfffta f £ftap> 

ati^jt<0^=Sr^t 3 2 2 Srft'T-t-^D *$£tfl<7>ft?jg 
*«SC?iJt(i, > 73- K(i 2 5jt*itcoft*t-, 

[0 0 7 3 ] O t: ' J > 7 3 - K 3 2 4 li, Pifitjlfl? 

v£3 2 Sii, -Stft^??L^-. h 3 3 0 hv'UL: 

/3- KcoiiflD^-->'S:aSwhA*t§i>o f'J >73 

- WZOOI/ / <Jl'))^i-7 , 7 # 7 > h Utgfft ? fit 

t^ l5 7^-7^^- y £t<7>7^-7^ >/< 
-ri<r ?-tx =*- K^'J x b^fi^tS;, 7ju- 
7^ >/<-(i, «5^f£ffl*ns 3- ku^Sct v--t 

7-t7 h£iHRt#£ c 

[0 0 7 4 ] ^>/<-!S, tf'J > 73- KfcJf^&tfft 
f3tt£t\ vi-yr-ffliL/:'] X h^b3- K£ 
iS^Lt, ifrcoHA'J x HriiOnLfcitiilffc^fc 
is tf'i > 7jI«i:7^-7&vM<tHAt: 

'J >73- K«r«7p1-&?i 4 5^«:tg^1-S- t^t 5 ^ 
S 0 + •/ h 'J > ? Sfifcfc: U > 73- K£ t l ) y?tZ> 

Ho 02 Oil, *5£W^)ffiSllttWUitc-&««kf , J > 
73- K7 -f > K7 3 3 2 <7)Ij®t&&o .x--if-(i, 
7*7n7i::&£iS*Sfc7 K3 3 8, 3 4 0 *^ 



kf >73- KX(4K#^i*t£So 7 < - ;u KcotS 
S(±»J-t-y 3 4 2 ^ftoT^ 'J7*ti£, £!E 

ii, S«r3 3 4 4:^ U ■/ ^ Lt-fc-7'?n, a— *f- 
li, SffSntlffftt^i-Sbf'J >73- KSCig 

ri3 3 6 t4:ttt'^ 5 7^-7'^>/<-ii, 

- 7' kf 'J > 73- K^fi*t'§4-^(7)t\ 7JU-7'^ > 

^ ?titi^^ 0 

[ 0 0 7 5 ] ilt^'-y a XlASJIJn^- KSffc 
3 1 2 i±, fiAb' 'J > 73- K'J X h CJp.B SrilflD-f £ 
/^Ul£ffl*tiS 0 [3 2 lii, *%Wco4tifi*)feMt:ffi 
SiifiPfc* »J >73- K7^7D73 4 4^®ffit*So 
t->lS^^T^7 > h+^7-ii, SL^3 

- KSr r^'J > K A/ 4 ] : J 7 < K 3 4 6 HA 

+ -At- rifiidi: J 7<-;u K 3 4 8t:A^^ns Q Jl 
ftD+'^ > 3 5 0 'J 7^ii4>, tf U > 73- K'J 
x HiSfrL^Wai^iifinSnSo ^ ^U-x.-jf^ > 3 5 
2*^ 7 9 Si-iS >, f'J >73- KMX H;*)*t> 
$^IJ)lx.bii^ 0 tf'J>73-K(i, r^F77 
f^b!)7 7 7'o - K 3 5 4 T-Ho 7'7^'.fy> 
3 5 6 (±, affl^-r + X h 7 r < JU^Eat^* i *K 
7 7 7'D - KtSfcrttMiffl?^), C(7)^^X h7T 

Y ;uti . JUT^t" 1 ; >73- K'ix hCl^^i.^lLS 

ibiit*^ 3--^-i:(i, lSfsntfcf , J >73- 
K'J x h^«fc?iLS. 

[ O I) 7 <i ] /" ' ^ - 7 > - : ; . 3 - K r ■? ^ - ~f >i 

Jjilt z^'j/jif^'^oS 7 ^ — ^ >'^ — ?j-}\Ah\\3 ~ "1' 
^ 'J / > -f S h , 7 ;u - 7' 1 j X h ?'r c j <n 3 - r'6') ! J x h 
rr' y n^^U fi^i±-};i:'i x i-.-K-/ ^x/j-^ 

as t , * >/<-(±, iiflB'-K^ > £ ? 'J 7 ? 1 1 g frco 
tiA'J x h K^iUfli-*: < ^(t 

n£ 3 1 4 'J > 7 'J 7.^-tS h , -x--»f-i + , Y 
< x«rftj£t-££ 0 EI2 2ii, ^^iflcofttig^iSP'J-::^ 
S -f >.f f -f > K7 3 5 8<7>®SQt*)£- ^ Y 

7D/ii, 3_--^-^\ i:*coiSftA 7 II?5EfiO'f >+'-f xc 
S II* & co >J» £ ^te t h Z. h A« t § h -H- - ^ x * 'J 

- >t&So miiii, K't) > 73- K4*^L'S{i#i: e t 

[0 0 7 7 ] V X h 3 6 OTi^b^'J > 73 

- K^'^L^ 1 ; > 73- Kco-fcy h &iHR-i"£>K 
(i-f ff^^ST-^-^T KUX 3 6 2 rA^1"S 0 V X 

k''j >73- Ki fef »J >7JHRt:?P5ii/jBBjS 
1-*£«a*£iftTir*£ 0 3SSoa«* f ll^?ii4 3 6 
4c JL--»f-ii. ^ >+'-f xotf'J > 7WPb13 6 6 una 
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fc, a— *f-iiftj£3 6 8 'J 7 ? IT, B3££RIJS 
LO*^it«tSo h 3 7 0(i, £TC0i| 

a«r^U7-t4 0 S5^ft*«i, 1212 ft 

0*'^l/#-F')^>K'? 3 7 2i:^?ii4o fcf 
•J >^*n- K 3 7 4 htf'J >^*WFa1 3 7 6I±, 
«r^tr*3 7 8 iftC^Sftio 
[0 0 7 8] ftli, B^iift^ + T'vx ^ H 3 8 4 , 
iS{iBft3 9 0, £g£3 9 2 «r^+4 0 ft&3 8 0 
fciSft^8B3 8 2 fc^Sitio 0-f^7t-7 7 
Hi, ) > /iI#?cE$<i-So IS^^iiW^^r-y x 
7 h 3 8 4li, ±IS^*(:^<7^-viffflU+'- H: + 
7 h 'J >7 **i& 0 /n 9 7^- vl^$fflt:r ^-t^i-^ >, 
7- if y - y a > ifcg it fcf l J > 7*/ft7> <i>#4*<ntt 
xhh 0 ^>^a^;&3 1 6^^'J7^t^>, S/T 
(i>f >,f^^f- H:H£o h** * > 3 8 

6 &£oofcabK:*7'-CEfflofc 

-HI4R3 8 8 (fiJ8Hm&lil$<) 
[ 0 0 7 9] tf'J >yiliR3 1 Stiftot, JL--*f- 
l±, t' 'J > / Kilt O * U - h 7 * - 7 

7 Y\z\mthm^%%l-tZttfX'hz> 0 M2 4 (i, * 
f&WwfttjSSiSPiJClE&fcf'J > riS«r<rn^3 9 4 
<nWmX~£>Z>o 7'J^"7> 3 9 6 CiSot, ^;u-7V 
>><-fi. BAfcT'J > K'j x hS^tiTrt 7 > h 
v>- y ^-^fi^LO** r/U-7'fcf'J > 7'u- KSr 

n98^^l ;E<£ M)i)::]: o t >; x I- !- -K^T-r ^ ffi 

7'n- KT?**i£i&fi\ ^-^vA(J:^ : j > /a - r'v 
*>0, 'J x Hit: 'J >^n- Kt:io'C^SI?it^ : ?< 
ff;VtZ&X'uhiiZ>i%£. »-3 7A(±I£iiET-*)0, l J 
x Hiiaftt: «t *)frSIS*i*o J.-^f-ti, ^-vftji: 
S^*ii£'fT^£!c4 0 2 

[0 0 8 0] JL-^f-ii, ? 7 < r> H:§8*1~M :: l-£ 
4 0 4 £Si:f£-T, -<Oft£li£j-ft£4 0 8 ti iv,* 

ffiii, !Sr4 0 S^^ii'J 7 U 7 ->i 4 0 7 0 * 

7 h 4 1 0 £1*RLT*> <fc^U ffil^7 *- 

77 h£*£4 1 2 LtU^o 4fjgH*SP!IT-(i, 
-F-li, Ho<o : p*^J|Sii/j7 *-77 K 

#7*-77 h A^JSK-f^o. s$o.fa7 + -7 
7 Hi, BSC 12 2 3 H^Lfco M2 5ii, $§§eflOffi§ 



11*401 CIS & WSffl * > ** < x 7 * - -7 -y h X(T> iy *' 4 
x hOiiST'^^o TOY >+'Y x 4 1 4 (i, i 
#-*M*4 1 8/ittT'4-<{S^^iSitt;^1"^'xif#^ 
fe»4 1 6^^t^ 3 wtoffifftli, AflffiC)MS?*i 

[0081] ei 2 6a. *%w<Dm$nmMi~fcz>^ i ) 

y >-f + h T-£> >f > ^* x u .-K 

- hX*f>Z>o > K< >-fU7 +-7 7 h 4 

2 0*±, BttTO, kf'J > 7*3- K 4 2 2 C J: ot 

*U X h *:ftJS&^taT-#*, 0 2 7ii, #%9f<7)4t 
jfiKttWlt:ffii) ^ - ^ ' J x K-v 4 2 4 (DWWiXh 
%> 0 x MUggi*. ^ ^ >7-;u/<- 15 4)4^ 

X h 4 2 6, ft* 'J X h 4 2 8, SiR5 3 0, ^^7'1 
5 8«r&tfo ^^-7'T777> hfflt:, ^-jMxH: 
Zoc7)U^;u^*>i'K ^^(i^/!/-7'i:1BA-C*4, ^* 
ii/-7*n Hi, t^7> h7^--»-t:J:oTfS 
$n-cfc^K ^ro7*ji/-7'^ w<-a*7?-txnTHg-e 
^'^-7^ >/<-(± v -rco^^-7V «t 

co^ >/<-[*, ifrO^ 'J X HJHR^^T-t'co'J X 

[0 0 8 2 ] > ^ >7-JU/<- 1 5 4 !:*£^-^'JX 
h^^ > 1 5 0 £ 2 'J 7 ?-t*>. Jiff X h 4 

3 4 «r^t^4 3 2 £fUR+£o :<0*l±, II^O^- 
)V 'jx K;*^^fi#cot&!5:4 3 6 h^'ft 
iftaSl?.-?L^0f+4 3 Srtf^t^, ilKH^4 4 
o b " .fi - ji 'J x !■ if ; H^-'r-r ■:: 

- 'j X h y f t n r 5 £ : t 7 x h h 7" u t: 
TXrK7> ;|2|;f; +i"f') t)\ > - ^ 'J x h (7)^- v flS] -r 

+ y h 'J > 7 ? rL/j^M 4 4 2 ^'J7^t^L WSK 
*iitz*-b 'i x h cMi"^ x — ;u >; x MfSffl^dii: < 
>l : [3 2 8 ii, ^^^^fttiS^^Wi-fKo x h 

IfSB^ -f > K7 4 4 4 COSSST-Ao 
[0083] ^t-JU'JX Mf-Si-x-y^fltTO^ -;U'J 
x ht:o^Tco-fttf^^K^L, a--»f-:±, /-^ 
>jx FT Kl/^tlfc^flLfcOr'^o ^iU-7'^ 

ii, ^iu-^'j x hco> ->u >; x n^Sfflii, ^*«ofc^ 

/<-(±, IIA^-^'iX h^lI^TJ ^^o 77)7/ h7 
^-v-V-ii, /;U-7V-^'J X h ^^f^t T 
77 7 > h7*-y>-i;jf^*il7^*ffl4 4 4 (i, ffl* 
altt4*7 * - l J x hc0Smf4 4 6 ^r^^1" 

>5o 'J x hco^BTj^^x^l^(i> i--»f-(i, 7 + -A 
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ho i--»f-(±, >^'J7^ Lt, £ft?> 

> -JU'J X h £%\m 4 5 0 , sfctWir KUX tjgfjD4 5 
2-e** 0 i85«*4 5 4 tft»t:3El?iifcBtt4 5 

[ 0 0 8 4 ] Ccol^ii^-^V X hT KUX 4 5 8 t 

uF^'i/t'rx'j/^ (la^tf-f) (±, tkuxo 

!i\ li^-;U7 KUX^^ti: Kyt ^ >%<D$&7 KU 
«>T-#4o tft»*"*>4 6 2 
^'J-yH^L &S7Kl/X 4 5 8<?)ft4 6 4 * ? g 

UX 4 6 6 tfWfcZi'i'Z^hfriffi'te 
[ 0 0 8 5 ] JL-^'-li, ttfft 7 < -;u K4 6 0 
(::?.?.£ fcfELT* 7 KUXCOiliR-ty h ta^>- t A c 5 

fc<0&£7 KUXO-SBfr#f£*j|l£o 4 6 

2 'J 7 -kiZ^&t&T KUX 4 5 8 0S 

4 6 4 ^fg^Sft^o 7 KUXCD&^-t 7 h<7) 
+ ^7 KUX 4 6 6 #S^Sft"C^&j4 l £7Fl" 0 
:x jgW 4* 7 K U X t ? M v ? IXUiZhZ® 

>-^^KKv)T K U x r S; : : fjij i& T >L Z i: rj ~J- 

5 £ : T'n- *>' .h^JlBSijl^J v > 4 6 S r ?'Jv? 
Tor, fti:*^^7Kl^x«^L^ TliV 

co^&jsbhijbu 4 7 o£? 7 y-t&h, tkux^ 

i%fc<n^- vx&thi)^fr{zfrfyteht\ ps.fec&a 
T * fe-C^iI § A ? fii| Bfc * ti h o #H * - ' < - * f *Pg t : 7 
K U x pfe-J- h m \z , J- - <f - 1: ft* £ £ 

^sss^ 7-t->^^?tLi> : -b.7 h' u^mm 

[0 0 8 6 ] X H?Mffl4 4 4 C*)*iifiD7 KU 

X+'* > 4 5 2 J^'J7 ^1"* t , iiftPT KUX/x- v 
;fi£o 12 2 9 i±. *%WOfttjailJftM(:ffi^it 
)JD7 KUX^O K7 4 7 2 ^Iiffi'C*)^o ftfr^ - 
X h 4 7 4 <7)%H5^-#±t:^?il^ 0 ^BUl±. 

> -;UU X Fp^-yCi 'J > y~ .x--«f- 
(i, itfl07 Kl/Xt, $ISa^ 4 7 6 Ci *K 7rf^ 
*b777'n-KLt, ilflp-C^^o ^--F-li, 7r 
1 JU%4 7 8 £ k-ft-tZZt tT-#S U ^*C07r^ 
i^f-ff^/^)!:^? 7 X'*'? > 4 8 0 tft'J w £ 



U'^o ^S5tiJl?fO^ ~^'J X h 4 8 2 ^f>{#T, 
ftHr^-^'Jx hi;^f*:?-e^>z> it-^o ilfia7 k 
UX(i N ftff7 KUX 'J X h {Zi£ti\\*tiZ 4 8 4 rt\ ft 
ff'JXH:ISf^4 4 8 6 , «ffl* f Dl*?n/jfi, J. 
— «f - ii , (i/^t^-o/:^^) OiUoC*^ LHSlft 

[ 0 0 8 7 ] a--»f-(i, git tf^-y 3 >^^ftf3c 
■J X h 'J > * 4 2 8 ^ * 'J 7 ^ t h Z. t iz I 4 *fr L ^ ^ 

-■>' t[B} i:t-A^> 3 L^L4tt!i ? ^, ftfS^-^'J x K 
->'tii. ^--^-(i^ -/U'J x h cog fluffs 
4 0 JL--if-(±7 KWX^ % Elfbttfc-r + X h.-K-v ^ 
XT'^fj^A^iT^^o ft 1 )!:, a— *f-(i, 7r<;u 
^b7 Kl/X^777 , a- Ki"S3i\ X(±ffiff^-^'J 
xM^7K^j3t:'-t^:i:U*Ho L^Li 
a--*f-/i J *fr L^«J X h Srft«t^>cOT\ Iltf'i 
x H:!Jtx.^fcMtyy3 xiii': jlfla^r^ 'J 
■y^i-^fc, ^7E^ti/j^Sij>7 Kuxo^^y-;u'j 
xh^ft/£?ii^>, a-^-C, il^nhM^^ 

[0 0 8 8 ] #3£Wi, v x^A^c07^-txf |gy> 

W:iotW- h ?ixi)t»a : tSlf^^ > r7'ii, SIEU 

^-V-, -t + j.7 7 ^■yhU-f-V*-, Kffili, 

7 4 7^r^- h^-Bg^ft, ^°7''j 7 ^^-fli^-ft, im 

L | .:'")■■>* ^ ■ •o::.ti:t;: ) < h ^, ---^'>i5,^ 
i?.^^ ■>' + - ^ *r &L>-^Sffi^"7 u - 7 - ? ;: J: o 'C 
llll^a^- HI 3 Oil. ^^HJjcm^m-t-^ v h7-^ 

7 v 3 > (5 0 0 ) Sriit j3ifl3 

-kiz&ii? 7^7> ^77'n-y3>rlfot: 

Oftf 7 h 7-^±T-Sffl-H--/<- (5 0 5' !:7ttr 
[ 0 0 8 9 ] .III ^ 7 1 7 > h 7 7 5, J y - -> 3 > i i , X 

* - ^ £« . \m > a - ^ * & 

frOTi^tiL^ (510) 3 cn^^Vi-iK^tofr 

J*ffl-H— /<-Ujt*«rifitlL (5 15) , mT-ii^yf y 
-t-vt-SfiSilCiS* ( 5 3 0 ) o Sffl-*- ><-!i3 

>7^ll/->3 >jL-4f - < > ^-7x-XTlfiT' 

*3Mt£ (5 2 0) o 3>7 -f U- •> 3 >J.--»f 
-<<> ^-7x-x(ifS^ff<II^fS:^v^-^r(5]f* 
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*fiU»( 5 2 5)« 
[0 0 9 0] aa>7-t-yi:iDi;-C, Sfl^Ki-gfl 

btt^5 rH 7>D-Kt^ ( 5 3 5) o5II^HT> 

^7>a-K, tJIWit^'/i-'^U 
r-v^c7)^ti (5 4 0) o #&9!fi, *iCfc^ 

ffioefflp(#*56W<7)fllWtffiH*c?aiKt4 C t U < 

^ii»ias<t-&o Mil*, $tt:j^bix^fx^ h y 

[0 0 9 1 ] **W<o-^*fcW«:*^r, 

->x* > h-c-gfiT^, ^777n'^iio 

y * ;HE95Sfi<7>2l ff fc-AsK^li-e-iiW fit ? 

7 * r > h nit LHtea^lWW-eS 4 J:^i:«:!:i: 

f-A (SDCE) 4 2t:iot, ttfilijfr'f^!: 
S2-fii-? m 3 Hi, f>^t 

t/^-/ " ; ~ " I 3 -i I £ ;0j L *C . iS( f r- ; > - ' 
1352: l-fl n > fc: ^ - '/ - 1 3 7 0 fti : i :• ' 
**§£Hflg&-> X -f A 1 3 4 2 a Sr^T, Ei 3 . . : . 
g3>^a-^-1352, SDCE^-'-l • 

8 , 'tff ^ >£i-?-1370 Bfl*C*?T?^'i>.i"f V 
f J *>Xf/, 1 3 4 2 b £^1"o 03 3 i±, iift^ > *: - 

— ^— 1 3 5 2 . SDCE-*-'<- 1 3 5 8, f-?- 
-*•»*--/<- 1 3 6 2 , -fff ^ > ti'jL - ? - l 3 7 n 
T^tT^n^IEBflS^yXT-z, 1 3 4 2 c «r/r: + : \ : A 
4(1, iSl§n> £ J a-?-1 352, SDCE-fr-'*- 
1 3 5 8, f- 1 3 6 2, 

- 1 3 8 8 , ^(|3> t'i - 5^- 1 3 7 OPfl-eiTfr?H 
&§EBflg$ty X^A 1 3 4 2 d ^/7to 

[0092] }m%mmwmrs *t 1. 1 3 4 21:* 

ot, ttl3 1 2co^fI^l 3 5 2(1, *#<0*-tft-£ 

fit 1 3 7 Q<r>tz#A-7*y * JUfEW 1 3 4 5 (H 

3 5#?s) Srrate-C§4o i»l 3 1 2(1, if#£3>^ 

<om •)£ j£*1-4 o i£fi#»ftlEWaS->^rA I 3 

4 2d, Xt^tn-tfit 1 3 7 otofctxnrvttoit 



ffltl 3 7 0 ^biS<i#l 3 5 2M£to S3 5 (i, f 
v *ME9! 1 3 4 S^^LTJq^ y^'J 7^-13 
3 2 fc 7'7 Y^- h *- 1 3 4 0 *«bJ££*-^7-/T 
LT^»9, '<7''J 7 1 3 3 2 (1, itfc^fit 1 3 

[ 0 0 9 3 ] ^it#iSftUMat4±SPflSO-o 
(1, *tft£flt 1 3 7 0<7)'s'7'<j y ** - 1 3 3 2 fcffi 
oTjt*£RS^ftl 3 1 2tl>^^bt«o if$C 
* #cOi^-tff t 1 3 7 0 i«fv * iHEW 1 3 4 5 tft 
oti/»iv^t*4 0 j*fltl 3 5 2^7^-tXoTtg 
&-gfit 1 3 7 OcOf-'y 1 3 4 5 A f ft^W£ 
(1, 3t*l 3 1 2 0«gt 1 3 5 2ii, -gfltcOy^'; 
7^- 1 3 3 2 £ffio-C£»l 3 1 2 SrBff^-ft-e* 

r, ^^is*, i»i 3 1 2* ? *B^?*4T^-tx^bi* 

f/, 1 3 4 2i:Rot, jt»l 3 1 2<0«etl 3 5 2 
(i, ^ft'tfltl 3 7 0<7)/^t:xy * MESS 13 4 5 

fit 1 3 7 0 U»t£*lift'J«i:fc*, 
[0 0 9 4 ] i£fg#ftftiE^gf|->X-rA 1 3 4 2 (i, 

fE^±l£<OMl£P^O>C#l 3 1 2^-tfftl 3 7 0 
^bjsfftl 3 5 2 Cf!1- 0 ilfltfftmE^^^vXf- 
A 1 3 4 2(1, LT, i#l 3 1 2 0ji 

fftl 3 5 2 ^<0*^*$lg#UHi-4ft1*R-3 

±A f ^ 7 Y r > h i 3 7 0 Jg rKTgt 

v 7}*v? i: 1 3 5 2 . ^fry^ *V3H- - ^ " 
u - :^a, vii,^ 4> ^ M^^^ i^r "ii v v 

'/ v f " > h 1 3 7 0 !:ft|iiKT^Ei^r?/f-H L 

T-; : fto 77f7>hEi:i, * 7 i r > b <7)ft§?ffi 

v u JiiitUJ 1 3 4 5 ^*F£?n4(7)-C*)4 5 ®WttO,i5< 
tV^vLlSii, SU^^^ISIE^i^MiL, -r^o^S: 

[U 0 9 5] Sflt^^S^vX^/, 13 4 2 

\mt\ 3 5 2 A J i»l 3 1 2 Oi* 1 3 7 

*j --p'K^f'Ifflt&o fy ^;HEW l 3 4 5 ^4^1~4^ 
I 3 5 2 36^^)1EffifliaSrffiffl-r4C hi: J: 
o-C. IMIt 1 3 7 OC^-^tx^ffiKto/j^Cll^ 
U^fiiiiift/hC4* s 3§ff# 1 3 5 2{i, -f'y^iHE 
l»] 1 3 4 5 £f£oT, **1 3 1 2 ^itft-gflt 1 3 7 

0 c£fec^flt4 3 ->xxA^tf 0 ±l£piju^^i:, 
JSfltT-*4#S±l 3 5 2(1, n^m^x-hh^y 
f7>M37 OCffif^itf^iiflL/j^o #S±1 3 
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5 2**7^-tXBr(g&f v^^KWl 3 4 5 fcSftfto 
T^4*v^7^7> h 1 3 7 OCJtLT, #II± 1 3 5 
2ii, ?v^7> h 1 3 7 0ffl<Afv*^IE9Jl 3 4 5 
iSfi#»^2SvX^i. I 3 4 2 £0* 

[0 0 9 6 ] ftftlC, S^tftftfiSv^^A l 3 4 2 
fi, fy^^lIWl 3 4 5* c 5fitr-*4^7<r>h 

l 3 7 Offll-lAA^fc^A^ft^Afc^C, f 

X l 3 4 6 £-f x y ?$r^Lfl?.#-fS:> ft^*A£\ iifl 

#»ftSiiv^-rA l 3 4 2fi, -feminity 4T> 

h^fflcJaoffittfliaSr^tf ^7 Y7 > h l 3 7 oi:i» 

fI#t*ftSfi->* J rA l 3 4 2(i*i:, 0 3 6C^t« 

mmm 3 4 7££j£t*o -offiWRni 3 4 

7(i, ?7-f 7> hiftjgr'-* 1 3 4 8, £j£1-£§ffl 
COM 1 3 4 9 (flitfX. 5 0 9 IEW Z$b9y<i7 

> h 1 3 7 OUP^+St^v^ ^itWt*(:*S4««<0 
fefSrUtulio ffiS3life#mi, lEWSKl 3 4 7 
(i, $££SDCE-H--'<- 1 3 5 SCjS^i^o SD 
CEf-'<- 1 3 5 Sti^C, ffiffitSffl 1 3 4 8<Offi£ 
«SKfc#tf>T ? 7 f7>M 3 7 0t: > ? ? H t 

- 1 3 5 8(i, ffii<50fiW*JS?n^UR L (J.- 7* 
-A'jv-xnt-y) S:ttot^7^7>H370 
I-IET-;* v -t- V £j*£ 0 1~£ t, ^7^f7>h 
1 3 7 Oli, Si>^xy7'7 7^f£aLT*I<7)URLi: 

r; y 9 j ngvw±7^-t:XT^^ 0 URLCTnx 
t^>h, ^7f7>M 3 7 0 tSDCE^-'<-13 
5 S 3fl?fc|«niKS-. ^SDCE^13GS aWfi i 

[o o ^ 7 ] 7 y i r > h l 3 7 o :i tiifi::. - -o^ 

iWirHtl.hOgM-tS^l 3 4 8 rSDC E 1 
3 5 8 i: A^t^-f**^^rt^ = fttifi'Maiffl'Cii, 
(i, ^7^7> h l 3 7 OhSDCE-^-'<- 1 3 5 8 
OfelO-t^aTvy-v h +- (SSL) ±T'fT?3 
a, HTML7t-A^fl|fflf^ 0 SDCE^-^-1 

3 5 8(i*i:, A*?a^i»««ri£te5n/jiEfflSKi 
3 4 7 PUZ&Z>im$iifz? y 1 T > HMRiitfxL 
T , ?7{7> M 3 7 0^1 L^^h'^ /J»2llt^); 
£at*>, SDCE^-><- 1 3 5 8ii, + 

> * JU Ji-c-tftf- ? 7 -Y 7 > h f X ? h 7 7 1 3 7 2 C 
§E^g»l 3 4 7 £3 0, £(g#->X-r£±-C*-^7 

- 1 3 3 2, 1 3 4 0 ££fSt4fcrtKlEffl£El 3 4 
7^ttfflt4 77 ^X7jf||^7i'7> H 3 70 

7li, g$i'V>^'77'l/7K^^ 7 J 7^f^ilL 

3 7 0 tia^Pl^t'iiba^o *M*Mi-f 
7^-K-l 3 3 2I±, ffiL<liPKCSl27 
+ £f£ot\ -gff^-vXrA l 3 7 OCffZ'IS* 

iiho '<y'J 7^^- 1 3 3 2 liS DC E 1 3 



5 Si:l*ft£rt\ :<?)SDCEt-/<- 1 3 5 8ii§- 
,i, /<r>J 7?&0^7 Y7> HiffiOffi^jSrf > 
I£«l 3 4 5 i: LT, LDAP4^L <^*\ * * 7 
(7)X> h 7X h^^fico) x>h7XFMfl^- 
/<-<0$$:§iEW-*->*- 1 3 8 8±Ti£fSLri^a 
[0 0 9 8 ] («x(f#S±) 13 5 2 

fi, n9L%£Z?y4 7> h 1 3 7 0 ffl<olfiffi*tt*:'< 
r , j7^- 1 3 3 2(:rnxL, ■/ - 1 

3 3 2 ^ioT-gfit? 7^7> h 1 3 7 0 £ J-tft - L 
ttmi 3 1 2 SrHf^ffcU *LT, Bf tft? ftfcit 
1336£?7<7>hl37 0Ui8fIt6w rri f T-A 
^7<7>F 1 3 7 0 ^ lA'tflf vXf 
Ai3 7Qi:££A6 (^V'J-y^-!:) Wt^' 
h+ _ 1 3 4 0 «r«oT«^ffcSii^t#l 3 
3 6£#t&ti 1 3 3 8 0 S3 7ti, i*jI#^ME^i£ 
fl>XfAl 3 4 2 ^>»-aPSS:/T+o i*fl#l 3 5 2 
tiX-r-y 7° 1 3 5 6X\ SDCE-H--^- 1 3 5 8 C3 
h U $fI#£^t£t£/.:^(;'ll : -> -H/7 KU 
XWftfc^ffiS-SriSoT, £fg£l 3 7 0 CHt4i£ 

[0 0 9 9 ] SDCEt-A'- 1358 ii^UX-f y y* 
1 3 6 0 T-, t±£ffi»S^(iilA7 KUXcoffi^tt'S: 
fl#l 3 7 0 Clf€<?)ffi*e-1*IRl 3 4 8lzmtZ>7-9 
^-Xl 3 4 6 £P°#i"^o -r'~ ^^-x 1 3 4 6 (i, 
I&jat*- 1 3 6 2f*|5g^(iS DC E+t- 

1 3 5 8rtOffi4^^^^^^§TOh^{:^or 
ffifflBTHlffift«l*l 3 4 8 7Wfe£«*l 3 7 
0co/;V)!:!:*^y^\ Xf77'i 3 6 4 t' 4 f-^S 
at L'J 5 DC E J -!---'<- 1 3 5 s '-H^ S DC 
E-t- i : ; ; 5 S :i-5;-:: x ^- ' 7 i :; .1 . v 

X\ l-df - 1 3 7 0 1* ^fiHU -r v ^ ^^^i 13 15 r 

[0 10 0] 13 3 8 tiiS(l#IS^IE^ga>x-f/, 1 3 
4'2 ^)SIS® 1 3 6 6 £ti;1-^\ 1 IKi^lE^M !: ^ 
(i'ii-Sr S DC E+t — '*— 1 3 5 8 Jiasflf?! 13 4 7 
Xt-^I 3 6 8 T\ i»l 3 1 2 60it*l-fl 

£1370 tmrnMrfflferZ:. z<D&miUi 1 3 g 

8(i, ^*'S(i#l 370t:^7<7> h^r- 9 i 
3 4 8 S:SMt4 3 **W«7)4fil*«fi£«T-Ji, SDCE 
•»*—/<- 1 3 5 8(i, «)B-jt:4i£?iL^JL-7 + -A'j 
v-xny-^ (URL) Jftor|t^JM7t- 
'>'-rSfit4 0 £j£?*ifcUR 'J 7 ^ LT, <gf! 
# 1 3 7 0(i, SDCEt-A- i 3 5 8 i<7>a#*tiS 
1 3 6 8 SrDfO'tb+o w60B#*T\ SDCE^-'<-l 
3 5 8(i, 3 7 0 7i^O#^«ft«:gffl1-SH 

[0 l 0 l ] HTML7t-Ai:|*?i'L^iAtiSl 
3 4 8(i, -Sfl#l 3 7 0t:iS(I^ii^i#l 3 l 2 t: 
S S ? *t & ffl-S « IS ^ ^ ^ ^ * - & ^ ?E ^ o T t i: ^ , 
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Vim. B^ftfcftsu^ufrdZ-gfc Lfr^*»*>* 

*tft££#l 3 7 0 U, 1A7KI/X, ttfeffJSfj^, 
ttHffl£1M\ flA#5HEW#^ (PIN) <7)»&1f£ 
HAflrai 3 4 8*>tt***tf>-C*> ii\, *%9J*>fta 
HttW?fi, SDCE*- 3 5 8 >$ff#l 3 7 
0OH^C(7)i.tiS(±, S SL£fioT$£$:f-*>*n, 
±TtTb*i4 0 JS^ftfcfflAflMai 3 4 8 Hbt, X 
f 7 -/ 1 3 7 4 0H, S DC E-f-^-li, ii^ftfcf 
-^ 1 3 4 8*ttft£fi*l 3 7 Oi:Ht*aEWSRl 
3 4 7iJtttLT£«#l 3 7 0 ^if£t4 0 &*>ftfc 
*« 1 3 7 4 >IEWSK 1 3 4 7t:a«Jt:SE« Siifcif 

ai 3 4 s^sfc-r**^, Sftti 3 7oiuf7y 

1 3 7 5 ft, tea(i;>:<7)Sr*t:Sc<o i£*>ft?t 

it«l 3 7 4 fclEWKEl 3 4 7t:aWUffi«3ft^fflf 
$5 1 3 4 8^£&l&^#£\ Sff#l 3 5 2 Cfi, f 
v ? >HI9§ 1 3 4 5#£/£*ftTv*£v*fc j§*0*ft£ 
{04 1 ) o 

[0 1 0 2] H3 9!i, SSSH^iEWgiiS'X^ 1 
3 4 2*>«=g:Kl 3 7 6 fciRL, eftfi'^v y 
7'7^- h*-^7-£*iiififft*o £iE&KS:P5 
1 3 6 6 ±-CS»Sft7tfflA««l 3 7 4 * f , SDCE 
-4--/*- 1 3 5 S-CiCT^m 3 4 7i:^LfcilSg 
SDCE^-'<- 1 3 5 8(i*i:^r77'l3 
7 77 h7x7>iEW8Rl 3 4 7 ££1I£yX 

tA137 OCiS^o JSbft/j7 7 h 7x7(i, fpflg 
Si 3 4 7 h'Sff^n > fcfi- 9- l 3 7 0 (liftoff 
■Srfil.niL, 7 7 -f ^- h//<7''J y **-a>t- i 3 
!3 H» ?!>±>r&.<l ^> V 'Uii^i l 3 1 5 *t 
£ : -^-^7-133 2, 1 3 4 0 si , JSfficft, 
?->xfi,i 3 5 2 "e.^Jt!iB-Js:Sd-|f.?ft^ W-iS*$t!iP< 
VCi. '<7''J 7 ?/7*7 Y ^t- h #-^7- 1 3 3 2, 

1 3 4 0 £i. PRCS 1 2 7 + hulflf *ft£o 

*C, ^r'J 7 1 3 3 2 3 7 0 UM1- 

3 4 7(7) 'J 777>X(i 4 -f <i# l 3 7 0 
^bSDCE^-^- l 3 5 8i:j*bft£, 

[0103] 04oii. &m%mmmmrs *t J* 1 

3 4 2 *)fc[S&ffi 1 3 4 8 ^^1, c ft(i£fl t'<7' 'J 
7^- 1 3 3 2 ^)i*fgtg^i:nf«fft4o iiJlo^cT) 

srafT\ 1 3 7 ouati/^'j 7 1 

3 3 2(i, *SfI#'>X-rA 1 3 7 OfrbSDCE^-^' 

- 1 3 5 8 US ib ft So SDCE*-'<- 1 3 58(ix 
f - -y y 1 3 8 6 X\ fy * 1 3 4 5 fc L T*£& 5 
ft^M'7- 1 ; -y^- 1 3 3 2 fc!£9JSR 1 3 4 7 HEW 

1 3 8 8i:i*£ 0 ifii^iSMTMi, im-*->< 

- 1 3 8 8 (i, LDAP (vO^Off^F'J 
rnxyoF^/H -*f-/<--C-*4 3 SDCE 

1 3 5 8(i, H3T^-rttUS:#l 3 1 2 
©# 1 3 7 0O^°7*'J / n- 1 3 3 2 Srfto-caffiHf 



^■ft 1 3 3 4 t'H:h «r^1-ia«r, X f- y 7' l 3 9 
0 T-i*(S# l 3 5 2t:iSfit-6o *C Bff^fb?ft^i 

# l 3 3 6 (i, -&#ji;ii* y h 7-^Xti-f > 
7F7-^f^ftl 3 4 4 ^iILT'§fl#l 3 7 0 t' 
i£ft$ft*o £fi# l 3 7 0(i*i:, I4i:/Ttac, 
WffiSrWa+iAz^Ug^St^rT Y^- h*- l 3 

4 o zmio 

[0 10 4] %'fio :^^->a >(i, &{I#ftftiE9J 

g&vX-rA 1 3 4 2 «rM*t5/ja6W««S*^^» 
IEW^-a- 1 3 8 8 *>t*fc»*E«*> 
lOT^Mi, 7^x^-7 -tf--> 3 >*^li8BS«:'£-l> Lfc 
i»o 13 4 Hi, yXfAClt^^ / hn-^oaLftS: 
SJiWt*£*7n--^^- hr-*-5>o i*ff£f X? h y 
7^7<7>F77KX7 0 i5fl#3 > tfi- 1 
3 5 2<7)rXy- F /7'1 3 5 4 ±"C£i, S«#*f*SEW 
ggvXfA 1 3 4 2(i, £fg#l 3 7 0 hf£St£/* 
y^^- 1 3 3 2 £B?.£-f &fcrti:S DCE^-a' 
-13 5 S&O'lEifl-fr-'*- 1 3 8 8t:iifi+S7 7 h 
7x7^uv^o -ffl#v7 H7x7ffii£g*(i, 
£{f#l 3 7 OCnt^^V'J 7 1 3 3 2 <nfem 

B#C, iHT'^'i 7^- 1 3 3 2 «rffioTi#l 3 1 

2 «rBf^ftL, 1 3 7 0^*^Tj*ft1-*fc 
Alci^SrSDC E^-^~ 1 3 5 SCiSS, 

[0105] SDC E 7 7 h 7X7 : SDCE 

f-^-77 h 7xrti, *5fe^co4fjg*«SPJt:-li, £ 
T69HTTPg*£«L, (ESI-^^AO^X^v-f 
X5iit7 >f ;u HTTP 7x7' 4f-/<- 

h, iia$-*t*-Sfi#i 3 7 o izmzn.? * -ju-4--/< 

7r'ku£L i:.ti:.K:K , ■> x ^ -'r> ^ V^'r^-nflf .£^5 

/u'Cv^i,, 7x7'+h-/<-(i, SDCE-*t-'<-135 
8 fZ£ 1 3 1 2c0^|i^flg-l 3 7 0 ^1^.11':^ < > 
^-7x-X^!), f:tSDCE^-^-1358 

iifv^n^i 3 4 5<nmm*t\m)-tbo t^w^t 

a*«SM-e(i, S DC E 7 7 h 7xr:i, fftfl^j 
i:lAURL«:MLt, itft-£g# 1 3 7 0 hSfE^ 
SSI 3 6 6 (S3 8) «:B8tei-S, SAURLii, €fl 

# 1 3 7 0 SrffigUlitEi-**-*:^. l> 

-j s-ffiism^^-^ii^-c-se^uisso -tfiti 

3 7 0 A J (HtSfifflAURLT-**) r^r-J cr 
^-txt^>, SDCE^-'<- 1 3 5 8li + -4:^ 
mm^Hl 3 4 7 tHJifttt, :Xi:7x 7 ^ > ^-7 
x-X^JlLT, ilE^Ii 1 3 6 6 £m\ m^-^-gfi 

# 1 3 7 0* f IEW£El 3 4 7 ^7^-^i:&at 

[0 10 6] 'SfI#^7^T> h 7 7 h7XT 0 iS<f# 

J*ftlEWaf*'>^^^ 1 3 4 2(±, imWKl 3 4 7 ^ 
b/<-/'J 7^/7*7 Y^- h^r-^T-^f^fJcL, -ft 
li, SDCE^-^<" 1 3 5 8 A^'£fi#'>x^A 1 3 
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> h 77 h^xrti, a^SKi 3 4 7 *5li}, £M# 
h 7 7*1 3 7 2 t^V'J 7 V7'7f^- h*- 
^7- 1 3 3 2 , 1 3 4 0 £«J£L 5ftS">Xf- A 1 
3 7 OT-wtlbCO*- l 3 3 2 , 1 3 4 0 £f£1S I, * 
7 - 1 3 3 2 4:SDCE + -^- 13 5 8 
i:£* 0 *4#«£«ffl-cii, -§:fl#^7 YT> h 77 

h7X7ii, •»/<7 7 , l/7K'*»J, »)X7'7'7')f 

Sot, $S#{±±iaotti:UR Li:(S*cr ^-txt 

ho 

[0 10 7] $im^-^-o *5£Wi, £^rv ?;u§E 
WSfaSrf'JfflLT^io iEffl 1 3 8 8 (i, fy 

^^IE^^'Sfl^Pif^t$^--*f-7'n7 r Y ;u («i 

1"4!E#$a*£tfo l 3 S 8fi, 5*rflE 

^t^/vT*i5iJ, 7'P^7A±<7)Y >^-7x-Xffi 

iott^o ftfa^iaWT-li, LDAP, X. 5 0 0, 

filE^-^- 1 3 8 8 t LtliffltHo f-5"X- 
x ^- /< - o $%flco»«SiSSMT'ii, SDCE-*->< 

- 1 3 5 8 (i, lE^SK 1 3 4 7 h fc<6K£{i 

1 3 4 6 £P.s&1-&o 
JSfeMT-(±, iSfI#60r X ? b v -f l 3 5 4 (i, rtffif'- 
M-X 1 3 4 6 SrB?.#T^ , X, Sflf^f X? h 7 
7'1 3 5 4 (i, f X? V 7 7° 1 3 5 4 J^bBftiMit S5 
Si;d- VXk & c . S DC E-H--'<- l 3 5 8 lUot 
fM fj-i: £ ?L-;, r 'iT' i'iS — >' . '~> 

l 3 5 4 7^iff£[:, 3t(ir- ^^-xps^jrS-U-^W 
nr)»T-jSfi#>x-r^ 1 3 5 2 " ? t z "j'fi£ 

Sr-flltf-? 1 3 4 8))*^i|&«Woi:^ 

w<mft£\ Sfl^SftgSflv'X-r^ 1 3 4 2ii&fc 
fffiH£#*>SEit4o liE^SEl 3 4 7«i»IIK*iifctB& 
1 3 4 8 ^/wti^* ? , 2IEOU^iU{,ZSIPH?nT 
LtJ»L&A^, **2:IEti35:iJtTX, ->xf-z, l 
3 4 2 (i, -ffl^l 3 7 0<7)/ja6!:£^r y ^>HEW 1 
3 4 5 £4*tii&a£fcisffi*fb+*o ■> 
J: 0JtM3&ffc*;lifc£§Sl 3 6 6 rlE^gte 1 
3 4 7 t*-5:>^^^t, Uft?*i^t*^iEiiSi:ftil) 
t4 0 (24 1 (i, Sfl*^ail'>X-rA 1 3 4 2 <D& 
*>i:*>£****y 'J-£t$tfJJ1-*7n--^- h i 3 
0 2 -e*4 0 

[0 10 9] Xf-7 7'1 0 2T\ i£fl£l 3 5 2fi, >C 
#13 12 i:|»-r4*Nft£<i#l 3 7 0^«7''J 7 

- 1 3 3 2 £IE9J-*J— 1 3 8 8 C?3£t£o '*7'J 
77^- 1 3 3 2**&£J»£\ i#l 3 1 2ii. '<7' ] ) 

1 3 3 2 tfiEo-CBf^-ftSft, Xx77'l 0 4 



T-gftf-l 3 7 OHiJIflSix*, '<7'v 7 1 3 3 

2 L£v*«fi\ i*(l#(Jt Xf 77'1 3 5 6 T'it 

3 7 OCM-r-SEWSKl 3 4 7 £SDCE 
1 3 5 8i:.BS^tl>o SDCEt-/<- 1 3 5 
8(i*CXf 7 7'1 3 6 0 t\ Wft'Sflt 1 3 7 0 CM 
1-£ffi$|U 3 4 8 ^f-M-X l 3 4 6 i:?.?.£+6 0 
tff$M ? £'K 1 3 4 6 CHCiat SflT^ 

S DC E-fr-><- 1 3 5 8 li* 7 7°1 3 6 
5T77^7> b 1 3 7 Oi:|58 + *ftSfr!E9i£R*£ 
j£-f >E> 0 1f$Rl 3 4 8^ft(, f-M-X 1 3 4 6 C 
l£tl?a-C^4:^jft^, SDCE^-^'- 1 3 5 8(1. 
Xf7 7'l 3 6 4-C-ffi«ft?ii/j7?;l2.?IKl 3 4 7 ^4 

[0 l l 0] Xf 7yi 3 6 8 T\ SDCE^-/<- 1 

3 5 8(±, £fS#l 3 7 0 >£§E£§£1 3 6 6 «:IH«S1- 
4,Ml 3 4 8i:^aL«rv^ SDCE^-^- 
l 3 5 8(1, Xf77'10 6 -Cj5fi#Ci§£0U 

7- 1 3 3 2, 1 3 4 0 ^£i&ti'fTfc*i&^c £&LT 
WKJ:, Xf77'1 3 8 0 t\ -gdf-1 3 7 OURU"* 
yH^-h/AV'J 7^-^7- 1 3 3 2, 1 3 4 
0^-ffi#yX-rA 1 3 7 0 C&^T 5 i\Z> , 
Xf 7 7 5 1 3 8 2-C\ Jr-^7-iiSDCEt-^-l 

3 5 SCiibWo Xf77'1 3 8 8 T', SDCE+h- 

1 3 8 S^ffioTitft'Sfl^l 3 
7 OUBBI-^SEW^IEIit^c ^77'1 3 9 0t, S 
DC E 1 3 5 2 Hf-'v^iHEBfl 1 3 

4 B^iiiat^o -f-Si:, iSflf-l 3 5 2ti, 0 3t:^ 
ttttzitfe^flt 1 3 7 O^^bX^n/j/^-'J 7 

1 3 3 2r(1io-Ct1if 1 3 I 2 1- lifr f t ^ b v Hff^fl; 
" ^ ^; ^ t.i; : ! :;:\t)?)\ --^h'-j:::;. f--- :- r v-7 1 3 1 
•i .LV'S:fi"# 1 3 7o;:.ii(^iuh, ^(^ti 3.7 0 
12 4 ::/TTt«cEtt?n^7-v r-<- i^- i 3 4 
0 i-fto-riig-^ft^a^is 1 3 3 6 *mw:*hz>- 
[0 1 1 1] mnzmmwztm l ttmmr } 

F7V/F, LANs t WANs, £^L^n^O£T 

coa^&'b-tM- &?j'*si2;^fi^co^ 7 h r 7- y<r>\mvr- 
f!3i«0 3 > t:' j. — ^ — 7" 7 7 h 7 t — A , ^- .1 

<«^i ^hi^ie > A a f 4- s 1 1 h z t a w e x h h , 
Sot *^(iffi*iIt:«fcoTO^»M?na tor- 

[g] l ] S#60->" * u h ^-9S^-fl:^7'D 7 
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[112] %tt<Dv-9 U-y Y*-%m<0-7uy ?®MX' 
[03] 7 ?*-%m-itorn y fi&ffl? 

[05] *^Wi:fR*tfiFiSf+'>X-rAO»ia-C4)4 0 
[07] *^ClS«tM^Tt77'n-y3> 

^ -r > K^^)iiffi*c*>^o 

[0 8] *%W04ta**ftWt:lf^> r ^^^-*>' r X > K 
[09] *&tyjt:ftS£ff#O^Y > K^colffiT-* 
[@10] *5£9Ii:1£4CU I 7 7*'J^->3><W> 
[Ull] *5IWi:fit4CU I ^'^-v^> K*<7> 

[013] *5£9Ji:fc£CU I iE»-9— v^Sffi 
[014] *56Wi:Bc4CU I ilSfu* 0 -- bM^r^r 
[01 5] i*7 + -7v bu&tt^'g 

[016] *%W:ft;£, 8*7 + -7 7 hi;fc'.t£f: 

[i'?il 7] 'U^n 'J > r v - : - - v ' ;* 

: : ^ : -3: (n? # u • h - I* il tin v h £ - 
•v — T 7 > V -ffcfr ^ > 7 Y > K7 cO'ii'Ii-C^ 
[0 1 9] ^S&W^ffiS V*) >/u- K7 < > K7cofj 
[02 0] #5feJfli:ffc*iSIStf 'J >7'u- mray 
[02 1] ^5Pfli:tf^Iflnt"'j >^3- vrimy 

[02 2] #&Wi:tfc* -f <r>MwX 



[02 3] «^t:fc£^O^xu.-ff- h 7 > 

[02 4] >/.ig^/^ra^c7)liffi 

[02 5] lf«O^U7^-77 h 

[132 6] $^i;ft^^ t''J/^-FO#07 
t-77 H;&it£-f >*w xu.-tf- h<?)iMffi*cA*o 
[02 7] ^-^'ixM- *J<nWWXfa 

[02 8] *5&Wl-:1R&^-^'J * H'N!^-><7)iIffi 

[02 9] KUX^- WMWVh 

ho 

[03 0] *5&WUtK4, li^x h 7-?±i?cO>C# 

[03 1] *v h7-?±T'<7)j*fi 3>fc:.x-*-fc£ 
ff 3 > t: ^ - ? - fal -C Ji |f * ii h £*!E9J y M% '> x r A 

[03 2] m\E?> tii-^-, SDCE+f-^- b-f 
f I n > t: i - * - Pel -C * ft * n £ IE W g m ■> * f - A 4- tj; 

[03 3] &iE?> SDCE-*-><-, -f 

[03 4] jiff 3 > SDCE"*-'<-, f 

- in! fy ? ? ! - HEW & > a r ^: T - 
[m.S 5] -r v 9^^h^" : :- : ■ ' : v;K':> : -- 
[1?I3 6] l;3il|07'n-- 

[0 3 7] im^m^<nm^^y7^^i:^i^\%lt 
[03 8] iifgtftf^IE^gfi->^^^cogZOiIE 

[03 9] ^mmmmmm^y u<nm^^-i f 
[04 o] t^f^^ im mm yy^L<n ®mm % 
[04 1] js it tmws*+L[imz>&-* 
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METHOD AND APPARATUS FOR DELIVERING 
DOCUMENTS OVER AN ELECTRONIC NETWORK 

BACKGROUND OF THE INVENTION 
TECHNICAL FIELD 

The invention relates to communication over an electronic network. More 
particularly, the invention relates to a method and apparatus for delivering 
formatted documents over an electronic network, such as the Internet, in a 
secure fashion. Further, the invention relates to the field of electronic document 
encryption. More particularly, the invention relates to techniques for the secure 
delivery of electronic documents to remote recipients. 

DESCRIPTION OF THE PRIOR ART 

Electronic networks, such as the Internet and intranets are increasingly being 
used to store and distribute a variety of data. For example, a World Wide Web 
(Web) page may include text, graphical displays, video displays, animation, and 
sounds. The Web enables a recipient to receive a document from a sender, 

regardless of platform, operating system, or E-mail system. Such 
communication is possible even when the document is not received at a 
computer but, rather, is received at a fax machine or networked printer 
connected to the Internet. 

In many instances, the sender of a document resides on a local area network, 
referred to herein as an intranet. The sender's computer may be connected to 
the Internet directly, or through the intranet's server Users who do not have a 
direct Internet connection can subscribe to the sen/ices of an access provider, 
called an Internet Service Provider (ISP) in the case of the internet. 
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The ISP maintains a network that connects its clients to the Internet, providing a 
server computer that acts as a host to its clients. The client accesses the 
Internet by using a computer with a modem to dial up the ISP, through the 
public telephone system. The ISP usually provides a point-to-point (serial) link 
through which the client communicates directly to the Internet, using the Internet 
standard TCP/IP protocols. 

Existing transmission schemes are frequently not suitable for sending certain 
documents over, for example, the Internet. Critical documents must be sent with 
complete security. However, the disparate E-mail systems have varying levels 
of security support. It is therefore difficult or impossible to determine whether an 
electronic communication is secure. 

Various cryptographic schemes have been used to provide security for 
electronic communications. However, the recipient of an encrypted message 
must have not only the decryption scheme, but sufficient hardware and software 
to decrypt the communication. Thus, it is frequently not practical or possible to 
send such an encrypted message. 

Thus, users are often reluctant to send documents electronically. These users 

must rely upon the slower and more expensive methods o ; courier service, and 
conven*ional mail service, 

It is also desirable tc be able to track a critical or sensitive document to insure 
that it has been properly received. However, it is extremely difficult, if not 
impossible, to track a document from point to point along the electronic network. 
For example, an E-mail message sent via the Internet is broken up into many 
discrete data packets. The packets are sent separately through the Internet to 
the intended recipient. Each packet may take a different route before being re 
joined to form the original document and delivered to the recipient. Therefore, 
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tracking such document has required tracking each individual packet through 
each link of the Internet. 

Additionally, while a computer may provide some level of security for a received 
document, tor example, with passwords or cryptography, an electronic 
communication is not necessarily directed to a computer. Thus, a critical 
document sent electronically to a printer or a fax machine is potentially exposed 
to public view. 

Even if such document is transmitted securely, it may not be legible when 
received. One problem common to E-mail is loss of document formatting. A 
document sent via E-mail is typically sent either as text in the body of the E-mail 
message, or as an attachment thereto. A text document usually does not retain 
the formatting of the original document. An attached document can retain 
formatting in some circumstances, such as if both sender and recipient have 
compatible software applications. However, some formatting may be lost even 
when the recipient opens a received document using the same application in 
which it was created. 

Changes in document formatting can create significant problems. Electronic 
forms may not be compatible if their formats are different. A misformatled 
document may not be comprehensible to the recipient. While many formatting 
changes are correctable, the costs lo the recipient in terms of time and expense 
may be substantial. 

It would therefore be an advantage to provide a method and apparatus for 
securely delivering documents over an electronic network, such as the internet. 
It would be a further advantage if such method and apparatus tracks the 
sending and receipt of a document, tt. would be yet another advantage if such 
method and apparatus preserves the formatting of a delivered document. 
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The development of computerized information sources, such as those provided 
through the Internet or other on-line sources, has led to a proliferation of 
electronically available information. The desired or required security for the 
secure distribution of information and documents across networks has led to a 
variety of architectures and techniques to protect this information. 

Encryption is a basic technique to scramble information or documents to 
prevent unsolicited access to that information. 

Figure 1 is a block diagram of secret key encryption 1210a, wherein a 
document 1212 is encrypted, or scrambled 1216, with a secret key 1214, 
producing an encrypted document 1220. The encrypted document 1220 can 
then be transferred to a recipient. Secret key encryption,. sometimes referred to 
as symmetric key cryptography, employs a technique of scrambling information 
to prevent unsolicited access, using a unique, secret key 1214. 

Figure 2 is a block diagram of secret key decryption 1210b, wherein the same, 
unique secret key 1214 is required to unscramble 1222 the encrypted 
document 1220, to reproduce a copy of the original document 1212. Without 
access to the secret key 1214, an encrypted document 1220 remains secure 
from tampering. 

One potential issue with secret key encryption 1210a and 12i0o is the 
challenge of distributing the secret key 1214 securely. For example, suppose a 
sender uses secret key encryption to encrypt a document 1212, and then sends 
a recipient the encrypted document 1220. The recipient needs the secret key 
1214 to decrypt 1222 the encrypted document 1220. If the secret key 1222 is 
sent over a non-secure channel, then the integrity of the security is 
compromised. For most applications, telephone or fax provides a secure 
enough means of delivering secret keys 1214, while the encrypted document 
1220 can be delivered over the internet using the Posta™ document delivery 
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system. In some instances, however, senders and recipients require a more 
robust or convenient means of distributing a secret key 1214. 

Public key encryption facilitates a more robust, and typically a more convenient 
means, of delivering information securely. With public key encryption, each 
recipient owns a pair of keys, called a public key and a private key. The key 
pair's owner (the recipient) publishes the public key, and keeps the private key 
a secret. 

Fig. 3 is a block diagram of public key encryption 1230a, wherein a document 
1312 is encrypted, or scrambled 1234, with a public key 1332, producing an 
encrypted document 1336. To send information to a recipient, a sender uses 
the published public key 1332 of the intended recipient to encrypt 1234 the 
information, and then the recipient uses their own private key 1334 (Fig. 4) to 
decrypt the information. Hence, the private key 1334 (which is necessary to 
decrypt the information) is not distributed. Fig. 4 is a block diagram of private 
key decryption 1230b, wherein the private key 1334 is required to unscramble 
1238 the encrypted document 1336, to reproduce a copy of the original 
document 1312. Without access to the private key 1334, an encrypted 
document 1336 remains secure from tampering. 

Public key encryption 123Ca sn^ 12 30b t/pically exploits a mathematical 
relationship between the public ar\-i private keys 1332. 1334, which allows a 
public key 1332 to be published, wthcj: '.sking the derivation of the private key 
1334 from the published public key 1332 

Public key encryption algorithms are tyoically complex, and hence may be too 
time consuming to be of practical use for many users. Secret key encryption 
1210a, 1210b is typically much faster than public key encryption 1230a, 1230b, 
but requires the transmission the secret key 1214 from the sender to the 
recipient. 
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In a digital envelope system, a user encrypts a document 1212 with a secret key 
1214, and then encrypts the secret key 1214 with the public key 1332 of the 
intended recipient. The recipient of the encrypted document 1220 then uses 
their private key 1240 to decrypt the secret key 1214, and then uses the secret 
key 1214 to decrypt the document. 

It is often useful to verify if a document has not been altered during 
transmission, or to verify who sent or received a given document. Hashing 
algorithms (or message digests) and public key technologies facilitate solutions 
to document integrity and transport verification. 

Digital certificates can also be used to provide enhanced security for encrypted 
information. Suppose a recipient owns a public/private key pair and wishes to 
publish the public key 1332 so others can use the public key 1332, either to 
encrypt information to be sent to the recipient, or to verify the digital signature of 
the recipient. A secure technique for the recipient to publish the public key 
1332 is to register the public key 1332 with a trusted authority. The trusted 
authority can then certify that a particular public key 1332 belongs to the 
recipient. A digital certificate connects a recipient, or other entity, with a 
particular public key 1332. 

A digital certificate, as disciossd later, is a record of a public key and an identity, 
and the association of the two as attested to by a third party by means of a 
digital signature. The private key is not in the certificate, but only one private 
key can match a given public key. A public/private key pair is actually a pair of 
numbers with the following properties: 

The private key cannot be derived easily from the public key; and 
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The public key can be used to cipher data which can only be deciphered 
by knowing the private key (some public keys algorithms, such as RSA, 
also have the inverse property, which makes them suitable for use a 
digital signatures). 

A trusted or certificate authority issues and maintains digital certificates. 

The disclosed prior art systems and methodologies thus provide some methods 
for the encryption and secure delivery of documents, but fail to provide a simple 
digital certificate generation and enrollment system that is implemented and 
controlled by a sender. The development of such a digital certificate system 
would constitute a major technological advance. 

SUMMARY OF THE INVENTION 

The invention provides a method and apparatus for securely delivering 
documents over an electronic network. The invention permits a user to track the 
sending and receipt of a document, while preserving the document's original 
formatting. 

For the purposes of the discussion herein, the term "document" includes any 
contiguous collection of data, including a stream of data, video data, audio data, 
animation, a platform-independent formatted document such as an HTML, PDF, 
or Envoy document, a platfcrm-specific formatted document such as a Microsoft 
Word or Excel document, an unformatted document such as a text document, a 
custom-generated report or Web page, or a grouping of one or more database 
records, such as SQL records. The term document can also include a grouping 
of one or more such documents. White the preferred embodiment of the 
invention is adapted for use in document transmission over the Internet, the 
invention is squally applicable to other wide area or local area networks. 
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In accordance with a presently preferred embodiment of the invention, a send 
client application is provided that allows a user to send a document over an 
electronic network from the desktop of a sending computer. Such document 
may also be sent from within a document authoring application. 

A dedicated server is provided to store the document received from the sending 
computer. The dedicated server then forwards an electronic message to a 
receiving device to notify the recipient of the document's transmission. 

The intended recipient downloads the stored document from the dedicated 
server in response to this message, In the preferred embodiment of the 
invention, the receiving device is a personal computer. However, in alternate 
embodiments, the receiving device includes a network server device, fax 
machine, printer, internet-compatible telephone, Internet access appliance, or 
personal digital assistant. 

A receive client application provided on the receiving, device is used to 
download the document from the dedicated server. The receive client 
application is preferably a Web browser, but can be any other software 
application capable of retrieving the stored document while preserving 

document formatting. The receive client application permits the recipient to 
receive, view, print, and manipulate the document. 

The send client application is accessed via an application window. The 
application window is displayed on the sending computer's desktop. The 
application window includes a persistent tool bar for accessing main functions 
and a menu listing operational commands for the send client application. 

A package manager and a package window are also accessed from the 
application window. The package manager lists all document activities initiated 
during an application session. The package window allows the user to specify 
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parameters of the document delivery, including the recipient(s), the 
document(s), and send options. Document delivery parameters may be stored 
in a storage module tor later modification and/or use. 

A document is specified for delivery in several ways. The user can click and 
drag the document from the sending computer desktop onto one of the 
application window or the package window. The document may also be 
dragged onto either the icon representing the send client application or the icon 
for accessing the stored document delivery parameters. The user can also 
browse local and network directories and select desired documents. A 
document can also be sent from within a document authoring application. 

A configuration user interface (CUI) is provided for directly invoking and 
customizing the dedicated server. In the preferred embodiment of the invention, 
the CUI is an HTML interface. The dedicated server is therefore directly invoked 
and customized via a Web browser. This HTML interface includes modules for 
sending and tracking the document, accessing account information, managing 
billings, and managing mail distribution lists. 

The CUI is accessed via a CUI application window displayed on a managing 
computer desktop. The managing computer can be the sending computer, the 

receiving computer, the dedicated server, or some other entity in the electronic 
network. The CU! application window displays a main tool bar for accessing 
main functions, and a secondary tool bar for accessing secondary functions. 
The CUI application window also includes a workspace for displaying an 
interactive interface to an accessed function, and a menu listing operational 
commands. 

The invention also provides a security framework that restricts system access to 
an authorized user. The types of security supported include authentication 
layers, secure socket layers, password protection, private key encryption, public 
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key encryption, and certificate authentication. The security framework can be 
implemented as one or more modules, and can be incorporated into at least 
one of the send client application, the receive client application , and the CUI. 

A sender driven certificate enrollment system and methods of its use are 
provided, in which a sender controls the generation of a digital certificate, which 
can be used to encrypt and send a document to a recipient in a secure manner. 
The sender compares previously stored recipient information to gathered 
information from the recipient. If the information matches, the sender transfers 
key generation software to the recipient, which produces the digital certificate, 
comprising a public and private key pair. The sender can then use the public 
key to encrypt and send the document to the recipient, wherein the recipient can 
use the matching private key to decrypt the document. In a preferred 
embodiment, a server is interposed between the sender and the recipient, to 
provide increased levels of system security, automation, and integrity. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram of secret key encryption of a document; 

Fig. 2 is a block diagram of secret key decryption of a document; 

Fig. 3 is a blcck diagram of public key encryption of a document; 

Fig. 4 is a block diagram of private key decryption of a document; 

Fig. 5 is a diagram of a document delivery system according to the invention; 

Fig. 6 is a view of an application window according to the invention; 
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Fig. 7 is a view of an application window showing document activities according 
to the invention; 

Fig, 8 is a view of a package window, according to the preferred embodiment of 
the invention; 

Fig. 9 is a view of a recipient's window according to the invention; 

Fig. 10 is a view of a CUI application window according to the invention; 

Fig. 11 is a view of a CUI package window according to the invention; 

Fig. 12 is a view of a CUI options page according to the invention; 

Fig. 13 is a view of a CUI tracking search page according to the invention; 

Fig. 14 is a view of a CUI tracking report preferences dialog according to the 
invention; 

Fig. 15 is a view of a recipient summary tracking report in basic format 
according to the invention; 

Fig. 16 is a view of a recipient detail tracking report in Basic Format according to 
the invention; 

Fig. 17 is a view of a recipient detail tracking report in billing code format 
according to the invention; 

Fig. 18 is a view of a group account manager account - view members window 
according to the invention; 
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Fig. 19 is a view of a billing codes window according to the invention; 

Fig. 20 is a view of an edit billing codes dialog according to the invention; 

Fig. 21 is a view of an add billing codes dialog according to the invention; 

Fig. 22 is a view of a create invoice page, according to the invention; 

Fig. 23 is a view of a basic invoice report window according to the invention; 

Fig. 24 is a view of a billing preferences dialog according to the invention; 

Fig, 25 is a view of an invoice report in spec invoice format according to the 
invention; 

Fig. 26 is a view of an invoice report in billing code invoice format according to 
the invention; 

Fig. 27 is a view of a mail list page according to the invention; 

Fig. 28 is a view of a mail list detail page according to the invention; 

Fig. 29 is a view of an add addresses page according to the invention; and 

Fig. 30 is a flow chart of the method for delivering a document over an electronic 
network according to the invention. 

Fig. 31 shows a basic certificate enrollment system implemented between a 
sending computer and a receiving computer across a network; 
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Fig. 32 shows a certificate enrollment system implemented between a sending 
computer, a SDCE server and a receiving computer; 

Fig. 33 shows a certificate enrollment system implemented between a sending 
computer, a SDCE server, a database server and a receiving computer; 

Fig. 34 shows a certificate enrollment system implemented between a sending 
computer, a SDCE server, a database server, a certificate server and a 
receiving computer; 

Fig. 35 is a block diagram of a digital certificate; 
Fig. 36 is a block diagram of a certificate digest; 

Fig. 37 shows the first stage of operation for the sender driven certificate 
enrollment system; 

Fig. 38 shows the second, attestation conversation stage of the sender driven 
certificate enrollment system; 

Fig. 39 shows the third, public/private key pair generation stage of the sender 
driven certificate enrollment system; 

Fig. 40 shews the fourth stage of the sender driven certificate enrollment 
system, referred to as forwarding and registration of the receiver public key; and 

Fig. 41 is flow chart that shows the basic decision tree for the sender driven 
certificate enrollment system. 
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DETAILED DESCRIPTION OF THE INVENTION 

The invention provides a method and apparatus for securely delivering a 
document over an electronic network. The invention provides a user with the 
ability to track the sending and receipt of such document. Throughout the 
delivery, the formatting of the document is preserved. 

For the purposes of the discussion herein, the term "document" includes any 
contiguous collection of data, including a stream of data, video data, audio data, 
animation, a platform-independent formatted document such as an HTML, PDF, 
or Envoy document, a platform-specific formatted document such as a Microsoft 
Word or Excel document, an unformatted document such as a text document, a 
custom-generated report or Web page, or a grouping of one or more database 
records, such as SQL records. The term document can also include a grouping 
of one or more such documents. While the preferred embodiment of the 
invention is adapted for use in document transmission over the Internet, the 
invention is equally applicable to other wide area or local area networks. 

The display screens and configuration of the graphical user interface described 
below are provided in accordance with the presently preferred embodiment of 
the invention. However, one skilled in the art will appreciate that such display 
screens and graphical user interfaces are readily modified to meet the. 
requirements of alternative embodiments of the invention. The following 
discussion is therefore provided for purposes of example and not as a limitation 
on the scope of the invention. 

Fig. 5 is a diagram of a document delivery system 10 according to the invention. 
The system allows the user to send a document 16 or set of documents and a 
recipient address or set of recipient addresses from the desktop 12 of a sending 
computer 14 over an electronic network 18 using a send client application 20. 
Such document may also be sent from within a document authoring application, 
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such as a word processor, spreadsheet, or graphics application. The send 
client application is preferably stored on the sending computer, but may be 
stored in a remote location accessible to the sending computer. 

The sending computer connects to a dedicated server 22. The dedicated server 
functions in accordance with such standards as, for example Internet standards 
to manage the transfer of documents between senders and recipients. The 
dedicated server may be a server provided by an' Internet service provider 
(ISP), or may be a separate dedicated server. 

In the preferred embodiment of the invention, documents are uploaded to, and 
downloaded from the dedicated server using the hypertext transport protocol 
(HTTP). HTTP is the communications protocol used to connect to servers on the 
World Wide ("Web"). A significant advantage of HTTP is that it is application 
and platform-independent. Thus, the sender and recipient do not need to use 
the same Web browser, or even the same operating system. 

The dedicated server 22 stores the document received from the sending 
computer 14. The dedicated server then forwards an electronic message to a 
receiving device at the address received from the send client application to 
notify the intended recipient c: r-o z'je-jrr-or.iZ transmission. This notification 
message is sent as s text (e.g. ASCII; message using the simpie mail transport 
protocol (SMTP) of the internet. 

in the preferred embodiment of the rver.tion, the receiving device is a personal 
computer 24. However, in alternate embodiments, the receiving device may 
include a printer 26, lax machine 25, network server device, Internet-compatible 
telephone, Internet access appliance, or personal digital assistant (not shown). 

The notification message contains tfe uniform resource locator (URL) of the 
document, which allows the server to locate the document. In response to this 
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message, the intended recipient downloads the stored document from the 
dedicated server 22 with a receive client application 30. The receive client 
application is preferably stored at the receiving device, but may be stored in a 
remote location that is accessible to the receiving device. The receive client 
application permits the recipient to receive, view, print, and/or manipulate the 
document. 

In the preferred embodiment of the invention, the receive client application is a 
Web browser. 'Thus, the intended recipient can copy the URL directly from the 
notification message, and paste it into a Web browser on the receiving 
computer. The Web browser then retrieves the document from the dedicated 
server. In alternative embodiments of the invention, the receive client 
application is any other software application capable of retrieving the stored 
document from the dedicated server while maintaining document formatting. 

The send client application is readily installed on a computer from a CD-ROM, 
or by downloading from the Web. For example, a user who already has an 
account with a dedicated server provider can configure the send client 
application with the appropriate account information. A user who does not have 
such an account is directed to a URL that has the information for setting up an 
account. 

The send client application is accessed via an application window displayed on 
the sending computer's desktop. The application window is displayed orce the 
account information is properly configured. Fig, 6 is a view of an application 
window 32, according to the preferred embodiment of the invention. 

The main function of the application window is to view the status of, and to 
manage send client application activity. The application window also serves as 
a launching pad to reach the various functions of the send client application 
and the configuration user interface CUI (discussed below). 
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In the preferred embodiment of the invention, the application window displays a 
main tool bar 34 for accessing main functions of the send client application. 
One such function is the selectable button for new package 36. Clicking on new 
package opens a new package window (discussed below), which allows a user 
to initiate a delivery of a document. Clicking on the open button 38 opens either 
a saved delivery parameter or a saved package window (discussed below). 

In the preferred embodiment, the main tool bar 34 includes buttons that are 
Internet shortcuts to CUI functions. Clicking on such button launches the user's 
Web browser and displays the appropriate page in the CUI. In the preferred 
embodiment of the invention, no additional login is required in this process. 
Examples of such buttons include tracking 40, account 42, billing 44, and mail 
lists 46 buttons. 

Buttons may also be provided for send client application settings. For example, 
a preferences dialog accessed via a setup button 48 permits the user to specify 
dedicated server and proxy server account information. The user can also 
specify whether or not to use a low-level secure communications protocol, such 
as Secure Socket Layer (SSL) to secure the connection between the desktop 
and the dedicated server for all transmissions. 

The send client application can access the local address books of supported 
applications. In the preferred embodiment of the invention, the user selects the 
setup button 48 and is presented with a pull-down menu which lists the address 
books supported by the invention. The user then selects the desired address 
book file. 

A stop button 50 is used to stop transmission of all information to the dedicated 
server. In the preferred embodiment of the invention, once clicked, the stop 
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button remains depressed. To resume transmission, the user clicks on the 
button again, and it returns to a raised position. 

The menu 52 lists operational commands for the send client application. In the 
preferred embodiment of the invention, the file menu 54 contains commands 
that have the same functionalities as buttons on the main tool bar 34. Other 
commands provide information regarding the send client application, or are 
Internet shortcuts to functions of the CUI. In Fig. 6, the menu includes listings for 
edit 56, package 58, CUI 60, and help 52. 

The application window also displays a package manager 64 that lists all 
document activities initiated during an application session. The package 
manager is an area, or set of fields in the body of the application window which 
lists all document activities that have been initiated during a send client 
application session. When the send client application is first launched, the 
package manager field is empty. However, as documents are sent, they are 
listed in the package manager. 

Fig. 7 is a view of an application window 32 showing document activities 72 
according to the preferred embodiment of the invention. The package manager 
may display the recipients ) 66, the subject 68, and the status 70 of the delivery. 

The status of an active deliver/ may be represented as a dynamic percentage ot 
upload completed. Other possible status labels include "completed," "error," 
"pending," and "on hold/' 

Documents may be listed, for example, in processing, or reverse processing 
orders. In the preferred embodiment of the invention, the document currently 
being processed 74 is presented in bold characters. In aitemate embodiments, 
the current document is indicated by other means, including highlighting, 
flashing, or color, or is unmarked. 
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Clicking on a listed document 76 highlights that listing and selects the 
document. Multiple documents may be selected at one time. Once a document 
is selected, the user can use the menu 52, for example, to hold, edit, or delete 
the document. 

A hold prevents a pending document from being processed. The document is 
held in a queue until it is deleted or the hold is removed. In the preferred 
embodiment of the invention, any or all documents in the list can be deleted. A 
current send is completely aborted, and an already-processed document is 
deleted from the window. 

Editing opens a document within a new package window (discussed below). 
The user can then edit the document and re-submit it for sending. If a document 
is edited in transmission, the transmission is aborted. The document is opened 
in a new package window, and the next pending document is transmitted. 

Fig. 8 is a view of a package window 78 according to the preferred embodiment 
of the invention. The package window allows the user to specify parameters of 
the document delivery. A new package window is accessible from the 
application window, for example, by menu or tool bar selections. A package 
window may be saved and opened at a later time. Additionally, a package 
window is opened when a user sends (prints) a document from a document 
authoring application to the send client application. 

Each document delivery transaction requires the sender to specify the 
recipient(s) of the delivery, the document(s) to be delivered, and the delivery 
options. Such delivery options include priority 80, request confirmation 82, 
document expiration 86, scheduled notification 88, and billing code 90. The 
preferred embodiment of the invention includes selectable buttons such as 
clear form 92, save form 94, save parameters 95, and send 98. 
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Any number of recipients or mail lisls for a given delivery are specified in the 
To:" -field 110 of the package window. Each recipient must be specified by an 
E-mail address, alias, or mail list. The user may type an address directly into 
the "To: 11 field. Alternatively, the user may access a recipients window by 
clicking on the "To:" button 108. 

The subject of the message is entered into the subject lield 134. The message 
itself is entered into the message field 136. The subject 134 and message 1 36 
fields are optional. In the preferred embodiment of the invention, the subject 
appears in the E-mail notification message and on an HTML cover page for the 
downloaded document. The message appears only in the E-mail notification. 

The documents field 112 in the package window allows the user to specify any 
number of documents to be delivered. A document is specified in several ways. 
Tne user can click and drag the document from the sending computer desktop 
onto one of the application window, the package window, or onto either the icon 
representing the send client application, or the icon for accessing the stored 
document delivery parameters. 

Clicking the documents button 84 in the package window allows the sender to 
browse local and netwo'k directories and select desired documents. If the 
package window is invoked rryr :''>:;:noi authoring application, the 
document field is automatically filled in with the current active document. 

A file format field 138 allows the user to specify in what electronic format the 
document is saved. The send ciient application is readily adapted to support 
different formats, such as Mac Binary, Envoy, PDF, Dynadoc, and HTML. For 
example, a document created in a wo;d processing application operable on 
one platform can be saved in the format of another word processing application 
operable on a different platform, 
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Each delivery transaction has associated send options. In the preferred 
embodiment of the invention, all options have default settings which can be 
changed by the user prior to delivery. Settings are viewed and edited in the 
package window. 

In the priority field 80, a user specifies the priority of a delivery, for example, as 
normal, low, high, or urgent. Priority determines the order the document is 
processed by the client as well as by the dedicated server. 

The request confirmation field 82 is used to prompt the recipient to confirm 
whether or not a document was successfully received. Request confirmation 
can be selected or de-selected, as desired. 

The security dialog 101 allows the user to specify varying levels of advanced 
security measures. These levels include specifying a password 100 for basic 
password protection, or requesting confirmation of a password 102. Additional 
security provisions, such as encryption 104 or requiring the recipient to use 
SSL to receive 105 the document, can also be provided. If the user requires the 
recipient to use SSL and is not using a secure connection between the sending 
computer desktop and the dedicated server, the recipient is asked whether or 
not to secure the connection to the dedicated server. 

The document expira:;on field 36 allows the user to specify how long a 
document will remain on the decicated server for recipient availability. A 
default, such as ten days after notification is sent, may be provided. 

The scheduled notification field 88 allows the user to specify a future date and 
time that the dedicated server will notify the user of a given delivery. The billing 
codes dialog 90 allows the user to select an optional billing code from a list 
associated with the user's send client application account. In the preferred 
embodiment of the invention, a cached list of billing codes is available. A 
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refresh button 114 refreshes the list whh the latest billing code list on the 
dedicated server. 

Once the user has specified delivery parameters in the package window, the 
user initiates the document delivery by clicking the send button 98. A delivery is 
initiated only if both the recipient and the document fields are entered correctly. 
The send button is not active until both such fields are complete, tf the user is 
working off-line, sent documents are queued for sending when the connection 
is eventually established. 

Addresses are matched first against the current local address book, tf the 
addresses are still not matched, they are uploaded to the dedicated server as is. 
The dedicated server then attempts to match addresses with a mail list, tf the 
* address is still not matched, the dedicated server appends the domain name of 

the account holder. 

A partially completed package window may be canceled or saved using the 
save form button 94. The saved package window may then be re-opened for 
future use. 

Saved delivery parameters can be used on a recurring basis across sessions. 
From a package window, a ussr can save delivery parameters including 
specified send options, an address list, and/or a fixed subject or message. To 
save delivery parameters, a user clicks on the save parameters button 96. A 
dialog box prompts the user to specify a name and location for the delivery 
parameters to be saved. - 

If the saved delivery parameters contain an address list, the user can initiate a 
delivery by clicking and dragging a document icon onto the saved delivery 
parameter icon. The document provides the remaining information required for 
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a delivery, and the send is initiated automatically. The saved delivery 
parameter thus serves as a dedicated mail chute to a specific set of recipients. 

The existing send options may be modified or confirmed before launching the 
delivery. A window displaying all send parameters is opened, and the user can 
modify parameters or append a message before sending the document, In the 
preferred embodiment of the invention, the user is prompted to save any 
modifications to send options or existing address lists upon closing the package 
window. 

If the saved delivery parameters do not include an address, clicking and 
dragging a document onto the saved delivery icon opens a package window. 
The saved send options and name of the document are specified in the 
package window. The user must specify a recipient before the document can 
be sent. 

Saved delivery parameters are opened by clicking on the associated icon, or by 
selecting the appropriate main tool bar 34 or menu items. The settings are 
displayed in a package window and are completed or modified for a delivery. If 
the send client application is not open, opening the saved delivery parameters 

opens the application window as well as a package window. Modifications to 
the saved delivery parameters are preserved by replacing the existing saved 
parameters, or by creating a new saved delivery parameters file under a 
different name. 

If unsaved changes have been made to the saved delivery parameters, the user 
is prompted to save the changes upon closing the package window. A sender 
can add an address list to an existing saved delivery parameter that did not 
previously contain an address list. The settings of the package window are 
saved using the "save settings as default" button 116. 
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Fig. 9 is a view of a recipients window according to the preferred embodiment of 
the invention. The recipients window 118 is used to select the recipient's name 
from an address book or pre-defined mail list. 

In the preferred embodiment of the invention, a pull-down menu 120 allows the 
user to access addresses in a local address book or a mail list. For example, 
selecting mail list in the pull-down menu and clicking on the refresh button 122 
populates the list box 124 with the names of the mail lists stored on the 
dedicated server for the account for which the send client application is 
configured. Selecting local address book and clicking on the refresh button 
populates the list box with addresses from the address book specified in the 
preferences dialog. 

Each time the recipients window is opened, the send client application displays 
a previously cached list of addresses, Clicking on refresh forces a refresh of the 
list from the appropriate source. The send client application presents the last 
selected source for the next send, both within and across sessions. The cancel 
button 135 cancels the recipients window display. 

A user can select items from the list box 124 and click the To" arrow button 126 
to specify the selections as recipients. !n the preferred embodiment o1 the 

invention., control-click allows s^l-elion o' multiple Items and shift-click selects a 
range of items. Recipients are presented in the recipients box 128. Recipients 
listed in the recipients box list are selected and removed by clicking the delete 
button 1 30 or by hitting keyboard backspace or delete keys. 

When the user clicks on the "OK" button 132, items in the recipients box list are 
displayed in the "To:" field 110 of the package window 78 (see Fig. 8). In the 
preferred embodiment of the invention, mail lists have the prefix "list:" 
prepended to them. A user can also delete or modify recipient addresses frcm 
the 'To:" field of the package window. 
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The specified document delivery parameters may be stored in a storage module 
for later modification and/or use. In the preferred embodiment of the invention, 
the send client application and the package window are accessed by selecting 
their representative icons (not shown) from the sending computer's desktop. 

A configuration user interface is provided for directly invoking and customizing 
the dedicated server. The CUI is accessed via a CUI application window 
displayed on a'managing computer desktop. Alternatively, the CUI is accessed 
through any Web browser application that supports tables, or accessed through 
the send client application. Fig. 10 is a view of a CUI application window 140 
according to the preferred embodiment of the invention. 

In the preferred embodiment of the invention, the CUI is an HTML interface for 
invoking and customizing the dedicated server via a Web browser. This HTML 
interface includes modules for sending the document, tracking the document, 
accessing information associated with the document delivery account, 
managing billings for the document delivery, and managing mail distribution 
lists. 

The CU! offers different sets of functions, depending on the user and type of 
account used. Individual acccun: ho;*j?-s croup account managers, and group 
members see slightly different interfaces and are able to access and manipulate 
varying sets of data. When a user i;-;:ictrs a CUI session, the type of account is 
identified by the dedicated server. The specific user is then provided with the 
appropriate functions and data. 

In the preferred embodiment of the invention, individual account holders and 
group account managers have access to all delivery and account information 
associated with the account. Account managers therefore have access to 
information regarding activities of all group members using the account. 
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Account managers are additionally authorized to create and manage member 
accounts. Group members have access only to information regarding the 
members own delivery services. 

The managing computer can be the sending computer, the receiving computer, 
the dedicated server, or some other computer in the electronic network. The 
CUI includes five main functions, new package 142, tracking 144, account 146, 
billing 148, and mail lists 150. 

In the preferred embodiment of the invention, these main functions are 
displayed as selectable buttons 142,. 144, 146, 148, 150 on a persistent main 
tool bar 154. In Fig. 10, this main tool bar is displayed in a ' horizontal 
orientation, and also includes a quit button 152. However, alternative 
embodiments display different configurations of the application window. 

A secondary tool bar 156 is provided for accessing and navigating secondary 
functions 164 within the main functions. In Fig. 10, the secondary tool bar is 
displayed in a vertical orientation. However, this configuration is for exemplary 
purposes only. The invention may be implemented readily to display different 
orientations of the main and secondary toolbars. 

The secondary navigation on the secondary tool bar 155 for the CUI application 
window 140 induces address 136 and options 168. A help button 158 included 
on ail secondan/ toolbars is used to access on-line help for the current function. 

The CUI application window also includes a workspace 160 for displaying an 
interactive interface to an accessed function. A menu 162 lists operational 
commands for the GUI. 

A send function mirrors that of the send client application. The send function is 
accessed from the new package button 142. This send function allows users to 
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send documents from remote locations using any browser. The send function 
also allows documents to be sent from platforms not supported by the send 
client application. In the preferred embodiment of the invention, saved delivery 
parameters, Envoy conversion, and access to local address books are not 
available. 

Clicking on the new package button to access the send function brings up the 
package window. Fig. 11 is a view of a CUI package window 170, according to 
the preferred embodiment of the invention. The current function is indicated by 
an item 192 in the secondary tool bar. 

For a given delivery, a user can manually enter names into the "To:" field 172. A 
mail list may also be selected from a pull-down menu 174. The user may 
thereby view and manipulate mail lists. In the preferred embodiment of the 
invention, the user does not have access to a local E-mail address book. 

If an item entered in the To:' field 172 does not contain proper domain 
formatting (e.g. the n @ n is omitted), the item is compared to the mail lists by the 
Server. If the item is not located in a mail list, the server appends the sender's 
domain name to the end of the item. 

A sender inputs text into the subject 175 and message 178 fields. The sender 
may specify a document to be sen; by typing the name of, and path ic the 
document into the '"'Document:' field 183. Alternatively, the document may be 
specified by clicking the browse bution 182 and browsing to select a document 
from a local or network directory. 

To send multiple documents, the sender clicks on the "Add more documents..." 
link 184. The sender is then presented with a window (not shown) having the 
same format as the new package window, with the addition of four additional 
"Document:" fields and browse buttons. The information already entered on the 
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previous CUI package window 170 is carried over into the new window. Thus 
in the preferred embodiment, a sender may specify up to five documents. In 
alternative embodiments, any number of documents may be specified. 

The reset button 186 clears ail fields in the v/indow to their defaults. The send 
button 188 is used to initiate the delivery of the document with the default 
options. If the information input into the address form is incomplete or incorrect, 
the invention displays an error page (not shown) to the sender. The invention 
may also prompt a sender fcr a document's mimetype if it is not recognized. A 
mimetype specifies the format of a document, and is used by the recipient 
browser to bring up the corresponding application to display the document. In 
the preferred embodiment, the error page is directly edited, and the new 
information directly submitted. When the send is complete, a notification page 
(not shown) is displayed to the sender. 

In the preferred embodiment of the invention, the CUI includes most of the send 
options of the send client application (see Fig. 8). These send options are 
accessed by clicking on the options button igo to open a CUI options page. 
Fig. 12 is a view of a CUI options page ig4 according to the preferred 
embodiment of the invention. Such options include priority 196, request 
confirmation 195, document expiration 200, and scheduled notification 202, 
however, because the send c'-\e:\[ application driver is not available from the 
server, certain send client options suzh as document type are not implemented, 
A document is therefore sent in the document's original format only. 

A security function 204 is incorporated into the preferred embodiment of the 
invention. The preferred embodiment of the invention supports security and 
encryption features permitted under current law for use in the United States. 
Alternative embodiments of the invention comply with any security and 
encryption requirements for software applications intended for export from the 
United States. 
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The CUI user may specify a password 206 that a recipient must provide to 
access a document. The user may also specify confirm password 208, encrypt 
document 210, and require SSL to receive 212. The password may be used as 
a secret key to encrypt the document on the server. This provides a higher level 
of security while the document is stored on the server. If the encrypt document 
function 210 is selected but the user has not specified a password, the CUI 
transmits an error message when the user attempts to apply the settings. 

The billing code option 214 allows users to select a billing code, including 
"None" from a pull-down menu. The list is defined and maintained in the billing 
module of the CUI (see Fig, 19). The "Billing Code" text link brings users to the 
billing section of the CUI. Users may thereby view and manipulate billing 
codes. 

Clicking on the reset button 216 restores the default settings. Alternatively, the 
current settings may be saved 218 as the default. Once the options are set, the 
user uses the Update button 220 to return to the package window 170. A 
delivery is then initiated by clicking on the send button 188. 

Tracking is accessible from the tracking button 144 on the persistent main tool 
bar 154. The tracking search function is used to query the CUI database for 
information about deliveries sent from an account. A sender can therefore find 
out whether a recipient has received a particular document. The database 
archive can also be searched for records of past transactions. 

Fig. 13 is a view of a CUI tracking search page 222 according to the preferred 
embodiment of the invention. The secondary navigation from the secondary 
tool bar 156 includes log 224, search 225, report 226, preferences 228, and 
help 158. The current function 192, search 225, is identified. The tracking 
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button on the main tool bar displays a record of all deliveries sent from the 
account as a delivery log (not shown). 

Account managers are permitted to track all deliveries initiated from a group 
account. Group members are permitted to track only those deliveries initiated 
personalty by the member. 

The format of the delivery log is specified in tracking preferences (see Fig. 14). 
The format chosen applies to both the delivery log and the tracking report (see 
Figs. 15-17). The preferred embodiment of the invention includes navigation 
buttons to permit the user to access previous, or subsequent log pages. 
Information regarding an individual delivery may be displayed on the delivery 
log, along with an indication of the total number of deliveries logged. 

The subject of each listing in the log links to a package detail report (not shown) 
about the specific delivery. A detail report contains send parameters of each 
delivery, including a link to the document if not expired, the mimetype, and the 
message. The detail report also contains the status of the delivery to each 
recipient, and the charges applied to the transaction. Users can click on log 
224 on the secondary tool bar 156 to return to the top level log. 

The search function allows users ic :./~po;;u information about, and the status 
of, a specific deliver/ or set of deliveries 7ne user specifies any combination of 
search criteria to identify the deliver es of interest. If multiple criteria are 
specified, the search engine performs a logical "AND" search among all the 
criteria. 

In ihe preferred embodiment of the invention, the search page graphical user 
interface (GUI) is simplified. A short list 230 of common searchable fields is 
presented on the Search page. The short list contains five search criteria: 
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The "To;" field 232 allows a user to search by the intended recipient's full or 
partial E-mail address of the recipient. Partial e-mail addresses allow the user 
to search by domain name. 

The "From:" field 234 allows an account manager to search according to the 
originator of the delivery, The account manager selects a member's e-mail 
address from a pull down menu. For group members and individual account 
holders, this given user's e-mail is provided and cannot be changed. 

The "Subject:" field 236 allows a user to enter keywords which may be found in 
the subject field of a document. 

The "Document:" field 238 aliows a user to perform a text search on the name of 
the document. A user can type in the name of the document, or browse through 
the list of documents to select a document . 

The "Send date:" field 240 allows a user to search for deliveries sent on, before, 
or after a specific date. 

Clicking on the search button 242 initiates the query and returns a report with all 

deliveries matching the query. Clicking on the reset button 246 clears the form 
to i:s defauit setting. 

Clicking on a "More Options..." button 248 at the bottom of the short form brings 
the user to a page having a second, expanded list (not shown) of searchable 
fields, including all fields from the short list. In the preferred embodiment, the 
•additional fields in the expanded list include: 

The billing code: field allows a user to select from a pre-defined list in a pull 
down menu. 
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The "Delivery status:" field allows a user to select from a menu of delivery 
statuses. Delivery status options include: any, received, not received (includes 
both failed notification and not picked up), confirmed, not confirmed, pending 
notification and failed notification. The user may also search document 
expiration, scheduled notification date, receive date, and message fields. 

The search results are presented in a tracking report. The tracking report is 
presented as a table in a format specified in the tracking preferences dialog. 
Fig. 14 is a view of a GUI tracking report preferences dialog 250 according to 
the preferred embodiment of the invention. 

The Dialog permits the user to select a document format 252, or to define a new 
format 254. In the preferred embodiment of the invention, a user can select from 
two pre-formatted reports, basic format and billing code format. Both summary 
and detail information reports are available in each format. 

The dialog allows the user to specify the number of rows per page 256. 
Additionally, the user selects whether to show recipient summary information 
258, or detail information 260. 

Clicking on update 252 saves ail changes and returns the user to the report or 
page from which the user accessed the tracking report. If the user returns to a 
report, it is displayed with the new preferences settings. The dialog is reset 
using the reset button 264. 

Fig. 15 is a view of a recipient summary tracking report in basic format 266 
according to the preferred embodiment of the invention. When search results 
are displayed, the secondary navigation in the secondary tool bar 156 indicates 
that the sender is in report mode 226. The elements and behavior of the 
tracking report are consistent with those of the delivery log. 
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In the preferred embodiment of the invention, the deliveries are sorted by date 
and presented in reverse chronological order. However, in alternative 
embodiments, the deliveries are presented in chronological order, or are sorted, 
for example, by recipient. The next page of delivery listings is accessed by 
clicking on the next button 284. 

A recipient summary tracking report lists, in the "Recipient (s):" field 270, only the 
name of the first recipient 268 of a particular delivery, or the first recipient on the 
mail list to which that delivery was sent. An indication (...) is placed next to the 
name if there are more names on the list. The number of recipients of the 
delivery is listed in the "Received:* field 272 and the number notified is listed in 
the "Notified:" field 274. This information is totaled 276 across all recipients. 

For example, the most recent delivery shown in Fig. 15 is the party invite listed 
in the "Subject:" field 278. The date the party invite was sent was January 22, 
1997, as is indicated in the "Sent:" field 280. The tracking report shows that a 
total of three party invite documents were sent. All three recipients were 
notified, and received the document. Only the first recipient 268, "jane 
©isp.com, 0 is listed in the "Recipient(s):" field 270. 

Fig. 16 is a view of a recipient detail tracking report in basic format according to 
the preferred embodiment ol the invention. A recipient detail tracking repon 282 
lists in the "Recipients):" field 270 each recipient of each delivery. The 
"Received:" 272 and "Notified:" 274 fields list the specific dates that each 
recipient was notified of, and received the delivery. For example, Fig. 16 
separately lists the three recipients of the party invite, and their notification and 
receipt dates. 

The recipient detail tracking report also expands every mail list. In the preferred 
embodiment of the invention, mail lists are only expanded for deliveries that 
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have been processed. Future scheduled deliveries and deliveries in progress 
are indicated as such. 

Fig. 17 is a view of a recipient detail tracking report in billing code format 286 
according to the preferred embodiment of the invention. The billing code format 
displays the billing code 288 and sorts results by billing code and date. 

The CUI account management functions are available from the main tool bar 
button labeled "Account 1 146. Account functions vary according to the type of 
account and the type of user, such as group account manager, individual 
account holder, and member account holder. The server software identifies a 
user's account type and makes the appropriate functions and information 
available. 

All users are able to view administrative account information on record for the 
respective user's account, including account balance, and can also change 
their password. Group account managers, however, have extended 
capabilities. They can edit group members 1 account information- as well as 
create new accounts, Thus, the secondary navigation of the secondary toolbars 
displayed to group account managers includes functions such as Information: 
302, view members: 304, and add member: 306 (see Fig. 13). 

The Information page (no: shown) displays basic information about the group 
account that is stored on the dedicated server. Such basic account information 
includes: 

• the name of the accoum 

• type of account 

• date it was created 

• date it was last accessed 

• the number of current members out of the maximum allowed. 
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Account managers can view and manage the current member list via the 
Members page (not shown). 

Account holder information includes: 

• name of the manager 

• e-mail address 

• company name 

• address 

The basic account information and the account manager information cannot be 
edited. 

The group account password can be changed from the Information page. The 
manager enters the existing password and the desired new password, and 
must confirm the new password. The manager submits the new password by 
clicking on Update. 

hi the preferred embodiment, the information page also includes a field which 
informs the manager when the password was last changed. If the password 
has never been changed, this fielc presents the creation date of the account. A 

link may also be provided tc n server manager who Is authorized to make 
cnanges to accounts. 

Managers can view a list of memhprs ny clicking on the members text link on 
the Information page, or by selecting the view members function of the 
secondary tool bar 156. Fig. 13 Is a view of a group account manager account - 
view members window 288, according to the preferred embodiment of the 
invention. In one embodiment, managers use a I nk (not shown) to Preferences 
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(not shown) where the managers can specify the format, the number of rows per 
page, and the sorting order of the View Members table. 

The view members page displays the name 290 of the group account, and the 
number 292 of the members displayed out of the total number. The list of 
members includes the account manager, and is presented in a table which lists 
the member account names 294, the member names 296, the date created 298, 
and the date last accessed 300. Clicking on a member's name brings up a 
"Mailto:" box (riot shown), pre-addressed to the member. 

Clicking on the account name allows managers to view and edit individual 
member account information. This information is displayed on a member 
account information page (not shown) which is similar in format to the group 
account information page. Basic member account information includes the 
following (editable information is noted): 

* group account 

• member account (editable) 

• date created 

• date last accessed 

Member information 

* member name (editable) 

♦ e-mail address (editable) 

Managers cannot view the member's password, but can change the password 
on the member account information page by specifying a new password and 
confirming it. The date of the last password change (not shown) by either 
manager or member is also displayed. Any changes made to the information 
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on this page can be submitted by clicking on update (not shown). Reset (not 
shown) restores the previously stored information. 

Member accounts can be completely deleted by clicking on a delete button on 
the member account information page. Prior to deleting the account, the 
dedicated server posts a confirmation page notifying the manager of the 
impending action and requesting confirmation before proceeding. When the 
member account is updated or deleted, an updated view members window is 
displayed. 

Managers can add members by clicking on the add member link in the 
secondary tool bar 156. A form (not shown) is displayed prompting the account 
manager for the information required to create a member account. The form 
indicates the group account to which the member is added, and the number of 
the member out of the maximum total members allowed. The information 
required includes: 

* member account name (created by the manger) 
member's name . 

♦ member's e-mail address 

• password (and confirm password) 

Clicking on add (not shown) creates a new account and returns the manager tc 
an updated view members window. Clicking on reset (not shown) clears the 
form. 

Because individual accounts have no group members aside from the account 
holder, such individual account holders do not have member information or 
functions. The secondary tool bar 156 includes only Information (not shown) 
and help (not shown.) The information displayed from the account information 
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page is the same as that available from the group account information page, 
except for the number of current members. 

Member account holders also do not have member management functions, and 
the secondary tool bar includes only information (not shown) and help (not 
shown). Member account information contains the same basic information as 
that viewed by managers. However, members are only able to edit e-mail 
address information. 

In the preferred embodiment, members can change their own passwords on the 
member account information page. They must enter the current password, the 
new password, and then must confirm the new password. However, in 
alternative embodiments, members may only be able to change their 
passwords via the account manager. 

The billing button 148 on the main tool bar 154 gives access to billing code 
mode management and invoice functions, Clicking on the billing button 
displays a table 320 of defined billing codes. Fig. 19 is a view of a billing codes 
window 303, according to the preferred embodiment of the invention. 

Secondary navigation for billing on the secondary tool bar 156 includes billing 

codes 310. add cedes 312. create invoice 314, view invoice 313, preferences 
31 3, and help 153. 

The table indicates the tcta! number of codes and which ones are currently 
being viewed 322. In the preferred embodiment of the invention, billing codes 
are up to 25 characters long and are composed of letters, numbers or 
characters. 

Each billing cede 324 has an optional plain English description 326 or name 
associated with it. In billing preferences (see Fig. 24) the user specifies whether 
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to sort the billing codes by code or by description, and how many rows to 
display per page. Preference settings 328 are displayed with the table. Next 
330 and Previous (not shown) buttons allow the user to view additional pages 
of billing codes. 

Two levels of billing codes are provided for group accounts. The group 
manager maintains a list of codes that are accessible by all group members. 
Group members can select their own subset of codes from the group list for 
easy access to "frequently used codes. 

Members cannot edit or create billing codes. They must select codes from the 
list created by the manager to add to their personal list. Members can specify 
whether to list group or personal billing codes in billing preferences. 

Clicking on a hot-linked billing code allows users to edit or delete the code or its 
description. Fig. 20 is a view of an edit billing codes window 332, according to 
the preferred embodiment of the invention. Users can edit a billing code or 
description from the appropriate fields 338, 340 in the dialog. The information 
in the fields is cleared using the reset button 342. 

Changes are saved by clicking update 334, which returns the user to the billing 
code table displaying the updatec information. Users may also dele-e 33G 
codes and descriptions from this dialog. Because group members cannot edit 
group biliing codes, group billing codes are not hot-linked when viewed by a 
group member. 

The add codes function 312 in the secondary navigation is used to add items to 
a personal billing code list. Fig. 21 is a view of an add billing codes dialog 344 
according to the preferred embodiment of the invention. 
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Managers and individual account holders enter a new code into the "Enter 
Billing Code:" field 346, Any associated optional description is entered into the 
"Description;" field 348 in the form provided. The add button 350 is clicked to 
add the new information to the billing code list. The replace button 352 is 
clicked to replace information in the billing code list. 

Billing codes can also be uploaded 354 from a text file. A browse button 355 is 
used to locate the appropriate text file for uploading. This text file either 
replaces or is added to the existing billing code list. When new codes are 
successfully added, the user is presented with an updated billing code list. 

Group members can only add codes from the group billing code list to their 
personal code list. When group members click on add codes, they are 
presented with a list box of codes from the group list. They may then select 
multiple codes from the list box. Once the desired codes are selected, the 
member clicks on the Add button to add the selected codes to their personal list. 

Clicking on the create invoice 314 link allows the user to create an invoice. Fig. 
22 is a view of a create invoice window 358, according to the preferred 
embodiment of the invention. The dialog is a search screen which allows the 
user to specify which deliveries :o bill for the current invoice. Deliveries are 

billed by billing code or by recipient. 

The user selects a biliing code or se: of rilling codes from a list 360 or enters 
the e-mail address 352 of the recipient. The list contains the billing codes and 
associated descriptions indicated in billing preferences. Current preferences 
are displayed 364. 

The user also specifies a date range for the invoice's billing period 366. Once 
the appropriate information is entered, the user clicks create 368 to initiate the 
query and generate the invoice. Reset 370 clears all entries. 
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The query result is presented in a pre-formatted basic invoice report window 
372 in view Invoice mode, as shown in Fig. 23. The billing code 374 and billing 
period 376 are displayed, along with the table 378 containing the query results. 

The table displays the subject 384 of each delivery, the date sent 390, and the 
recipient(s) 392, The price 380 and the total 382 of the deliveries are also 
indicated. 

Invoice format is specified in the billing preferences. The subject 384 of each 
delivery is hot-linked to the package detail report, described above. If the 
package detail is accessed, the navigation state remains in billing/view invoice. 
Clicking on view invoice 316 returns the display to the invoice report. 

The export button 386 allows users to export the report data as a tab-delimited 
text file for integration into other existing billing systems. Invoice report 
preferences 388 (excluding the mark-up rate) are also displayed. 

Billing preferences 318 allow users to specify the preferences which affect 
billing code management and invoice report formats. Fig. 24 is a view of a 
billing preferences dialog 394 according to the preferred embodiment of the 

invention. 

A pull-down 396 allows group members to choose to use a personal billing 
code list or a group billing code list maintained by the account manager. All 
users choose to display lists by billing code 398, or by description 400. This 
selection affects the display in selection boxes in send options and invoicing. 

The selection also affects the presentation of the billing codes display table, if 
display is by billing code, then the first column is billing code, and the list is 
sorted by billing code. If display is by description, the first column is description 
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and the list is sorted by description. The user specifies the number of rows 
displayed 402 per page. 

The user also specifies the rate 404 to charge clients. This rate can be a flat 
charge 408, or may include a percentage mark-up 406 on top of the costs 
charged by the user's Internet services provider. The information displayed in 
the billing preferences dialog can be updated 405 or refreshed 407. 

For the invoice report, the user may select a predefined format 410, or define 
412 a new format. In the preferred embodiment, the. user selects from three 
predefined formats, the basic invoice, spec invoice, and billing code invoice 
formats. The basic invoice format has previously been shown in Fig. 23. 

Fig. 25 is a view of an invoice report in spec invoice format according to the 
preferred embodiment of the invention. The spec invoice 414 displays the total 
number 416 of recipients for each delivery as well as the size 418 of the 
document. This information is sorted chronologically. 

Fig. 26 is a view of an invoice report in billing code invoice format according to 
the preferred embodiment of the invention, The billing code invoice format 420 
is sorted by billing code 422, as well as by date. 

The CUI allows publishers and other users to create and manage distribution 
lists. Fig. 27 is a view of a mail list page 424 according to the preferred 
embodiment of the invention. Mail list functions are accessible from the main 
tool bar 154. Secondary navigation includes mail list 426, create list 428, 
preferences 530 and help 158. 

There are two levels of mail lists for group accounts, i.e. group and personal. 
Group lists are managed by the account manager and are accessible to all 
group members. A group member can define a personal list accessible only by 
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that group member. Each member can specify which set of lists to use in their 
mail list preferences. 

Clicking on the mail list button 150 on the main tool bar 154 displays a table 
432 listing existing mail lists 434. The table also presents the total number 436 
of recipients on each mail list and the date 438 the mail list was most recently 
modified. The preferences settings 440 are also displayed. 

In mail list preferences (not shown), the user specifies whether to sort the items 
by the name of the mail list or by date. Current preferences are displayed in the 
mail lists dialog. Next and previous buttons (not shown) may be provided to 
navigate between pages of mail lists. 

4 Clicking on the hot-linked name 442 of a mail list brings up a mail list detail for 

the selected mail list. Fig. 28 is a view of a mail list detail window 444, 
according to the preferred embodiment of the invention. 

The mail list detail page displays general information about an existing mail list 
and allows the user to view and manage mail list addresses. Group members 
oannot manipulate group mail lists. Therefore, the mail list detail of group lists 

does not display fields tor editing. Group members can, however, edit personal 
mail lists. 

Account Managers can manipulate group mail lists. The detail 444 presented to 
account managers displays the name 446 of the mail list in an editable form. To 
rename the list, the user changes the name in the form and clicks on the update 
button 448. Users may also delete 450 the entire mail list or add addresses 452 
by clicking on the appropriate button. The total recipients 454 and date last 
modified 456 are also displayed. 
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The detail also displays the mail list addresses 458. In the preferred 
embodiment of the invention, the first page of the complete address list is 
displayed in accordance with the number of rows per page specified in the mail 
list preferences. The detail indicates which addresses out of the total are 
displayed. Next and previous links (not shown) may be provided to navigate 
between multiple pages of addresses. 

The user can also view a select set of addresses by specifying a query in the 
field 460 provided. For example, an e-mail address or a portion of an address 
such as a domain name can be specified. Clicking on the view button 462 then 
displays a table 464 of matching addresses 458. The table indicates which 
addresses 466 out of the total matching set of addresses are displayed. 

The user edits or deletes individual addresses in the table by clicking on the 
appropriate address. An edit page (not shown) with update and delete buttons 
is then displayed. When the address is updated or deleted, users are returned 
to an updated mail list detail page. 

From the detail page, users can also delete multiple addresses at a time. 
Clicking on the "delete items on page" button 468 deleies all the addresses in 

the table. Clicking cn "delete all matching items" 470 deletes all items which 
matched the query-, whether or not the addresses ars visible on the current 
page. A warning message asking the user to confirm the action is displayed 
before the dedicated server actually deletes the addresses. Once the 
addresses are deleted, the detail page is immediately updated and presented 
to the user. 

Clicking on the add addresses button 452 in the mail list detail 444 displays the 
add addresses page. Fig. 29 is a view of an Add Addresses window 472 
according to the preferred embodiment of the invention. The name of the 
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current mail list 474 is displayed at the top. The name is also linked to the mail 
list detail page. 

The user can add additional addresses by manual entry 476 t by uploading 
them from a file. The user can enter a file name 478, or use the browse button 
480 to search all files. Names may also be obtained from an existing mail list 
482 and merged with the current mail list. The additional addresses are added 
484 to the current address list or replace 486 the current list. After the names 
are submitted, the users are returned to an updated member detail page with a 
line at the top confirming the addition or replacement that just occurred. 

The user can create a new mail list by clicking on the create list link 428 from 
the secondary navigation. In the preferred embodiment of the invention, the 
crea te mail list page (not shown) is similar to the add addresses page. 
However, in the create mail list page, the user is prompted for the name of the 
mail list. 

The user can manually enter addresses in the provided text box. Alternatively, 
the user can upload addresses from a file or copy addresses from an existing 
mail list. However, because the user is creating a new list, there is no option 
provided to replace an existing list. Clicking add creates a mail list with the 

specified names and addressee. "iiv:- is presented with an updated rr.aii 
list report, with the new list information included. 

The invention also provides security for restricting access to the system to an 
authorized user. The types of security supported by the invention include 
authentication layers, secure socket layers, password protection, private key 
encryption, public key encryption, and certificate authentication. This security is 
provided by a security framework that includes at least one security module, in 
at least one of the send client application, the receive client application , and the 
GUI. 
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Fig. 30 is a flow chart of the method for delivering a document over an electronic 
network, according to the invention. The sending computer establishes a 
session (500), for example, over the Internet. The sending computer then 
delivers the document to a dedicated server (505) over this electronic network, 
using a send client application. 

The send client application preferably includes modules for sending 
documents, listing document activities, tracking documents, specifying and 
storing document parameters, and for providing security features (510), Any or 
all of these modules may be accessed during a particular session. 

The dedicated server stores the document (515) and forwards an electronic 
notification message to the receiving device (530). The dedicated server is 
managed via a configuration user interface (520). The configuration user 
interface preferably includes modules for sending documents, tracking 
documents, accounting, billing, generating mail lists, as well as a security 
feature module (525). 

tn response to the notification message, the receiving device downloads the 
document (535) from the dedicated server using a receive client application. 

The receive client application preferably inciudes modules for downloading, 
viewing, and manipulating the document, as well as for providing security (540). 

Although the invention is described herein with reference to the preferred 
embodiment, one skilled in the art will readily appreciate that other applications 
may be substituted for those set forth herein without departing from the spirit 
and scope of the present invention. The invention is readily constructed and 
configured by one skilled in the art, using well-known programming techniques 
and equipment. 
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For example, the placement and contents of the toolbars and menus in the 
desktop displays described herein is for exemplary purposes only. 
Furthermore, the functions of the invention may be accessed by alternate 
means, including icons, and keyboard text entries. 

In one embodiment of the invention, the notification message regarding a 
document delivery is received by a notification receiving device. The document 
can then be retrieved by a receiving device that is either included in the 
notification receiving device, or is separate therefrom. For example, the 
notification message can be received on a pager or personal digital assistant, 
and the document received on a personal computer using a Web browser. 

The sender driven certificate enrollment system (SDCE) 42 enables 
corporations, publishers and individuals to securely distribute documents 
electronically, by allowing the sender to initiate and control the implementation 
of digital certificate enrollment to one or more recipient clients. 

Fig. 31 shows a basic certificate enrollment system 1342a implemented 
between a sending computer 1352 and a receiving computer 1370 across a 
network 1344, which may include an internet. Fig. 32 shows a certificate 
enrollment system 13^2b implemented between a sending computer 1352, a 
SDCE sen/er 1358 and a receiving computer 1370. Fig. 33 shows a certificate 
enrollment system 1342c implemented between a sending computer 1352, a 
SDCE sen/er 1358, a database server 1362 and a receiving computer 1370. 
Fig. 34 shows a certificate enrollment system 1342d implemented between a 
sending computer 1352, a SDCE server 1358, a database server 1362, a 
certificate sen/er 1388 and a receiving computer 1370. 

The sender driven certificate enrollment system 1342 enables the sender 1352 
of a document 1312 to initiate the generation of a digital certificate 1345, (see 
Fig. 35) on behalf of an intended recipient 1370 of a document. A document 



47 



(84) 



1#H¥ll-272594 



1312 can mean a specific computer file or more generally any discrete 
collection of data. The sender driven certificate enrollment system 1342 
simplifies the associated complexity of generating a digital certificate for an 
intended recipient 1370 of a document, and transfers the primary burden of 
certificate generation from the recipient 1370 (which many systems support 
today) to the sender 1352. Fig. 35 shows a digital certificate 1345, which 
denotes a key pair comprising a public 1332 and private key 1340, where the 
public key 1332 is associated with a specific entity, such as an intended 
recipient 1370,' and is published. 

One of the main problems associated with secure document delivery stems from 
the challenge of encrypting a document 1312 with the public key 1332 of the 
intended recipient 1370. in particular, the intended recipient 1370 of a 
document may not have a digital certificate 1345. In the absence of a digital 
certificate 1345 of the recipient 1370 which is accessible by the sender 1352, 
the sender 1352 of a document 1312 cannot encrypt the document 1312 with 
the recipient's public key 1332, and hence cannot be assured that the 
document 1312 can be protected from unsolicited access. The sender driven 
certificate enrollment system 1342 allows the sender 1352 of a document 1312 
to initiate the process of dynamically generating a digital certificate 1345 for the 
intended recipient 1370. thereby imposing minimum requirements for the 
intended recipient 1370. 

The sender driven certificate enrollment system 1342 transfers the burden of 
certificate generation from the recipient 1370 of a given document 1312 to the 
sender 1352. The sender driven certificate enrollment system 1342 exploits the 
fact that, in the context of document delivery, often the sender 1352 of a 
document 1312 has unique and specific information regarding the intended 
recipient 1370. Suppose, tor example, an attorney sends a document to a client 
1370. The attorney 1352 likely has a record associated with the client 1370 
which contains specific information, such as the client's e-mail address, 
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physical address, telephone number. The client record may also contain 
confidential information, such as the client's social security number, drivers 
license number, or even credit information. 

Typically, it is this type of confidential information which is utilized to 
authenticate a given individual or entity 1370, and hence generate a digital 
certificate 1345. Highly confidential and specific information yields a high level 
of authentication, and hence a secure digital certificate. 

Therefore, the sender driven enrollment system 1342 exploits the fact that the 
sender 1352 often knows significant and confidential information regarding an 
intended recipient 1370 of a document 1312. The use of this confidential 
information by the sender 1352 to generate a digital certificate 1345 minimizes 
the burden imposed on the recipient 1370 to confirm their identity. The digital 
certificate 1345 is then utilized by the- sender 1352 to securely send the 
document 1312 to the intended recipient 1370. 

System Implementation. In the example above, a sender attorney 1352 wishes 
to send a confidential document to an intended recipient client 1370. For a 
client 1370 that does not currently have a digital certificate 1345 accessible to 

the attorr.ey 1352 f the attorney 1352 can invoke the sender driven enrollment 
system 1342 tc generate a digital certificate 1345 for the client 1370. 

First, the sender driven enrollment system 1342 checks or queries a database 
1346 to determine if a digital certificate 1345 exists for the recipient client 1370. 
If not, the sender driven enrollment system 1342 conducts a database query to 
pull up a record for the client 1370, which typically includes client specific and 
confidential information. 

The sender driven certificate enrollment system 1342 then generates a 
certificate digest 1347, as shown in Fig. 36. This certificate digest 1347 
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contains most of the information necessary to generate a digital certificate 1345 
for the client 1370 t including the client specific data 1348, and the type of 
certificate to generate 1349 (e.g. an X.509 certificate). In a preferred 
embodiment, the certificate digest 1347 is forwarded to a secure SDCE server 
1358. The SDCE server 1358 then "contacts" the client 1370, seeking 
independent confirmation of the confidential information 1348. For example, in 
a preferred embodiment of the invention, the SDCE server 1358 forwards an e- 
mail message to the client 1370 with a unique, dynamically generated URL 
(uniform resource locator). The client 1370 can then "click" or access this URL 
through a standard web browser. Accessing the URL begins a direct interaction, 
or SDCE conversation 1368, between the client 1370 and the SDCE server 
1358. 

The client 1370 is typically asked to input one or more pieces of confidential 
information 1348 to the SDCE server 1358. In a preferred embodiment, the 
conversation takes place over a secure socket layer (SSL) channel between 
client 1370 and the SDCE server 1358, and utilizes HTML forms. 

The SDCE server 1358 then attest whether the client 1370 is correct, by 
comparing input information to the stored client information 1348 within the 
stored certificate digest -1347. On a match, the SDCE server 1358 forwards the 
certificate digest 1347 over a secure cr.ar.nel to :hs recipient client's desktop 
1372, and also distributes software to :he recipient client 1370, which uses the 
certificate digest 1347 to generate a key pair 1332, 1340 on the recipient 
system. In the preferred embodiment o' the invention, this software is simply a 
Java applet, transparently forwarded to the recipient 1370 through the browser. 
The generated private key 1332 is stored on the recipient system 1370, 
preferably using the PKCS12 format. The public key 1332 is forwarded back to 
the SDCE server 1358, which typically registers both the public and client 
information as the digital certificate 1345 on a certificate server 1388, such as 
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an LDAP or an Entrust certificate management server (of Entrust, Inc., Ottawa, 
Canada). 

The sender (e.g. the attorney) 1352, can now access the stored public key 1 332 
for the intended recipient client 1370, encrypt the document 1312 intended for 
the recipient client 1370 with the public key 1332, and then send the encrypted 
document 1336 to the client 1370. The client 1370, in turn, decrypts 1338 the 
encrypted document 1336 with [the public key and] the corresponding private 
key 1340, which is now resident on the private recipient system 1370. 

Fig. 37 shows the first stage 1350 of the sender driven certificate enrollment 
system 1342. A sender 1352 initiates the generation of a certificate for a 
recipient 1370 at step 1355, by contacting an SDCE server 1358 and 
forwarding basic information to identify the recipient 1370, such as an e-mail 
address. 

The SDCE server 1353 then queries a database 1346, at step 1360, for 
confidential information 1348 specific to an intended recipient 1370, such as a 
social security or personal address. The database 1346 may reside at any of a 
number of locations, such as within a separate database server 1362, or within 
the SDCE server 1358. 

If usable confidential information 1348 exists for an intended recipient 1370, it is 
transferred, at step 1364, as a daia record to the SDCE server 1358. The 
SDCE server 1358 then uses the data record to generate a certificate digest 
1347, at step 1365, which is later used to attest the recipient 1370 and to 
generate a digital certificate 1345. 

Fig. 38 shows the second stage 1336 of the sender driven certificate enrollment 
system 1342, referred to as an attestation conversation. The SDCE server 1358 
takes the certificate digest 1347 and initiates a direct interaction, at step 1368, 
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with the intended recipient 1370 of a document 1312. This direct interaction 
1368 solicits client specific data 1348 from the intended recipient 1370. 

In a preferred embodiment of the invention, the SDCE server 1358 sends an e- 
mail message with a dynamically generated Uniform Resource Locator (URL). 
The recipient 1370, by clicking on the generated URL, invokes a direct 
interaction 1368 with the SDCE server 1358. At this point, the SDCE server 
1358 presents HTML forms soliciting specific information from the recipient 
1370. 

The HTML forms and requested private information 1348 may vary, depending 
on the level of security desired for the document 1312 to be sent to the recipient 
1370. For example, for a document that does not require a high level of 
security, the forms might simpiy request a confirm button. For a document that 
requires a higher level of security, the form might ask the intended recipient 
1370 to submit specific private information 1348, such as a personal address, a 
social security number, and employee number or personal identification 
number (PIN). In a preferred embodiment of the invention, this interaction 
between the SDCE server 1358 and the recipient 1370 takes place over a 
secure channel using SSL. 

Using the forwarded private inro:~;£won K-j43, through step 1374, the SDCE 
server then attests the recipient 1570 by comparing the forwarded data 1348 to 
the certificate digest 1347 for the intended recipient 1370. If the forwarded 
information 1374 and the appropriate stored information 1348 in the certificate 
digest 1347 match, the recipient 1370 is authenticated, at step 1375, and the 
process continues to the next stage. If the forwarded 1374 information and the 
appropriate stored information 134S in the certificate digest 1347 do not match, 
the sender 1352 is notified that no digital certificate 1345 has been generated 
(Fig. 41). 
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Fig. 39 shows the third stage 1376 of the sender driven certificate enrollment 
system 1342, referred to as public/private key pair generation. Assuming that 
the private information 1374 solicited over the attestation conversation stage 
1366 matches the certificate digest 1347 at the SDCE Server 1358, the SDCE 
server 1358 then forwards software and the certificate digest 1347 to the 
recipient system 1370, at step 1378. The forwarded software utilizes the 
certificate digest 1347, and information local to the recipient computer 1370, to 
generate a digital certificate 1345, comprising private/public key pair 1332, 
1340. The key pair 1332, 1340 is sent to and stored locally on the sender 
system 1352. In a preferred embodiment, the public/private key pair 1332, 1340 
is stored in a PKCS12 format. The public key 1332 and a reference to the 
certificate digest 1347 for the recipient 1370 is then forwarded from the receiver 
1370 to the SDCE server 1358. 

Fig. 40 shows the fourth stage 1384 of the sender driven certificate enrollment 
system 1342, referred to as forwarding and registration of the receiver public 
key 1332. At this stage in the process, the public key 1332 for the intended 
recipient 1370 has been forwarded from the recipient system 1370 to the SDCE 
server 1358. The SDCE server 1358 forwards the public key 1332 and the 
certificate digest 1347, combined as a digital certificate 1345, to a certificate 
server 1338, at step 13S5. In a preferred embodiment, the certificate sealer 
1 3S3 is an LDAF (Lichivveight Directory Access Protocol) server. The SDCE 
server 1358 then sends a notification back to the sender 1352, at step 1390, 
that indicates that the document 1312 can now be encrypted 1334 with the 
public key 1332 of the recipient 1370, as shown in Fig. 3. The encrypted 
document 1336 is then delivered to the recipient 1370, typically across a 
network or internet architecture 1344. The recipient 1370 then uses their own 
private key 1340 to decr/pt the information, as shown in Fig. 4. 

Implementation. This section provides an overview of the components to 
construct a sender driven certificate enrollment system 1342. Some of the 
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components, such as the certificate server 1388 do not require any 
customization or development. Fig. 41 is a basic flow chart that describes the 
flow of control for the system. 

Sender Desktop Client Software. On the desktop 1354 of the sender computer 
1352, the sender driven certificate enrollment system 1342 includes software 
which communicates with the SDCE server 1358 and the certificate server 1388 
to query the public key 1332 associated with the recipient 1370. The recipient 
software component, upon retrieval of the public key 1332 for the recipient 
1370, typically encrypts a document 1312 with the public key 1332 and then 
f onwards ths document to the SDCE server 1358 for subsequent delivery to the 
recipient 1370. 

SDCE Server Software, The SDCE Server software, in a preferred 
embodiment of the invention, includes a HTTP Web Server with a customized 
filter to intercept and redirect all HTTP requests, a e-mail server to forward 
notifications on to an intended recipient 1370, and the basic software and logic 
to query a database server, to generate a certificate digest 1347 (as described 
above), and to interact with all other components of the system. 

The Web sen/er is a primary interface between the SDCE server 1358 and the 
intended recipient 1 370 oi a decuman: 1312, in which the SDCE sen/er 135S 
assists in the construction of a digital certificate 1345. 

In a preferred embodiment of the invention, the SDCE server software initiates 
an attestation conversation 1366 (Fig. 38) with the intended recipient 1370, by 
dynamically generating a private URL The private URL contains a key to 
uniquely identify the recipient 1370, and then forwards this "key" to the recipient 
over a standard e-mail notification. When the recipient 1370 accesses this "key" 
(which in fact is a private URL), the SDCE server 1358 associates the key with a 
given certificate digest 1347, and then through the Web interface, conducts the 
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attestation conversation 1366, to verify that the given recipient 1370 matches 
the parameters of the certificate digest 1347. 

Recipient Client Software. The sender driven certificate enrollment system 
1342 creates a public/private key pair from a certificate digest 1347, which is 
forwarded from the SDCE server 1358 to the recipient system 1370. Client 
software on the recipient computer takes the certificate digest 1347, constructs 
the public/private key pair 1332, 1340 on the recipient desktop 1372, stores 
these keys 1332, 1340 on the recipient system 1370, and then forwards the 
public key 1332 to the SDCE server 1358. 

in a preferred embodiment, the recipient client software is a Java applet, which 
is transparently and dynamically downloaded via a web browser, in which the 
recipient simply accesses an URL, as described above. 

Certificate Server. The invention makes use of basic digital certificate 
management. The certificate server 1388 includes query ability, which 
determines if a digital certificate exists for a recipient given a specific user 
profile (e.g. an e-mail address and identifier). The certificate server 1388 also 
includes update ability, which allows a programmatic interface to add a new 
certificate to the server's database. In preferred embodiments, LDAP ; X.500, or 
proprietary certificate severs such =s a Entrust server can be used as certificate 
servers 1333. 

Database Server. In a preferred embodiment of the invention, the SDCE server 
1358 queries a database 1346 containing recipient information to construct a 
certificate digest 1347. In a basic embodiment, the sender's desktop 1354 can 
query an internal database 1346, or the sender's desktop 1354 can simply load 
information directly from the desktop 1354. The preferred database query 
provided by a SDCE server 1358 supports more scalability and extensibility. 
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In addition to the basic design for the invention, there remains situations 
wherein no recipient data 1348 exists which is readily accessible from the 
senders system 1352, either directly from the desktop 1354 or via a database 
query. In this case, the sender driven enrollment system 1342 still retains value. 
While the certificate digest 1347 contains limited information 1348, the level of 
attestation is also limited. However, basic attestation can still take place, and 
the system 1342 still simplifies the process of generating a basic digital 
certificate 1345 for the recipient 1370. In this case, the system behaves exactly 
as designed, with the exception being a more simplistic conversation 1366 and 
certificate digest 1347. 

Fig. 41 is flow chart 1302 that describes the basic decision tree behind the 
sender driven certificate enrollment system 1342. 

At step 102 r the sender 1352 queries the certificate server 1388 for the public 
key 1332 of an intended recipient 1370 for a document 1312. If the public key 
1332 exists, the document 1312 is encrypted with the public key 1332, and is 
sent to the recipient 1 370, at step 104. If the public key 1332 doesn't exist, the 
sender queries the SDCE Server 1358 for a certificate digest 1347 for the 
intended recipient 1370, at step 1356. 

The SDCE server 1353 then qjeries the database 1340 for information 1340 
regarding the intendec recipient 137Q, at step 1330. If the information exists 
and is already stored in the da:abase 1346, the SDCE server 1358 generates a 
rich certificate digest for the client 1370, at step 1365. If no information 1348 
exists and is stored in the database 1346, the SDCE server 1358 generates a 
simplified certificate digest 1347, at step 1364. 

At step 1368, the SDCE sen/er 1358 initiates an attestation conversation 1356 
with the recipient 1370. If there is no match to the information 1346, the SDCE 
server 1358 notifies the sender 1352, at step 106, and there is no generation of 
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a key pair 1332, 1340. tf there is a match, a private/public key pair 1332, 1340 
forthe recipient 1370 is generated on the recipient system 1370, at step 1380. 
The key pair is then forwarded to the SDCE server 1358, at step 1382. At step 
1388, the SDCE server registers the certificate forthe intended recipient 1370 
with a certificate server 1388. At step 1390, the SDCE server notifies the 
sender 1352 of the digital certificate 1345. The sender 1352 can then encrypt 
the document 1312 with the generated public key 1332 of the intended recipient 
1370, as shown in Fig. 3. When the encrypted document 1336 is sent to the 
recipient 1370 /typically over a network 1344, the recipient 1370 can decrypt the 
encrypted document 1336, using the stored private key 1340, as shown in Fig. 
4. 

Although the sender driven certificate enrollment system and its methods of use 
are described herein in connection with use in the Internet, the invention may 
be applied to any of a wide variety of networks, including internets, intranets, 
LANs and WANs, or any combination thereof, as desired. As well, 1he invention 
may be applied to a wide variety of computer platforms, servers, communication 
protocols, cryptography protocols, or any combination thereo.f, as desired. 

Although the present invention has been described in detail with reference to a 
particular preferred embodiment, persons possessing ordinary skill in the art to 

which this invention oorains v.i' ;.;:•*■ .-.-.v.-:: vanous modifications snd 

enhancements may be made wiino-Ji ce^artlng from the spirit and scope of the 
claims that follow. Accordingly, tne irvert-on should only be limited by the 
Claims included below. 



57 



(94) 



^¥11-272594 



CLAIMS 

1. An apparatus management and delivery system comprising: 

a send client application for delivering at least one document as a single 
package from a sending computer over an electronic network during a session; 

a dedicated server for storing said at least one document from the 
sending computer and for forwarding an electronic message to a receiving 
device; and 

a receive client application on said receiving device for downloading, 
viewing, and/or manipulating said at least one stored document from the 
dedicated server in response to the electronic message. 

2. The apparatus of Claim 1, wherein said send client application further 
comprises a package window for specifying parameters of the document 
delivery. 

3. The apparatus of Claim 1 t wherein said send client application further 
comprises a storage module for configurably storing said specified document 
delivery parameters, wherein said document delivery is initiated using said 
stored document delivery parameters. 

4. The apparatus of Claim 1, wherein said send client application runner 
comprises a module for accessing an address book from a supported 
application on said sending computer, wherein said document delivery is 
initiated using the contents of said address book. 

5. The apparatus of Claim 1, wherein said document is delivered by 
selecting and dragging said document onto one of an application window, a 
package window, an icon representing said send client application, or an icon 
for accessing said stored document delivery parameters. 
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6. The apparatus of Claim 14, wherein said Configuration User Interface 
comprises: 

a sending module for sending said document; 
a tracking module for tracking said document; 

an account CU! for accessing information associated with a document 
delivery account; 

a billing module for managing billings for said document delivery; and 
a mail list module for creating and managing mail distribution lists. 

7. The apparatus of Claim 1, further comprising a security framework for 
restricting access to said apparatus and/or to said document, said security 
framework having at least one security module in at least one of said send client 
application, said receive client application, and a configuration user interface. 

8. The apparatus of Claim 19, wherein said security framework supports at 
least one of authentication layers, secure socket layers, password protection, 
private key encryption, public key encryption, and certificate authentication. 

9. A document management and delivery apparatus for an electronic 
network, comprising: 

c. dedicated server for electronically notifying a notification receiving 
device on an electronic network of at least one document stored on said 
dedicated server; 

a receiving device on said electronic network for receiving said at least 
one document in response to said notification; 

wherein said receiving device uses a receive client application to 
download said document from said dedicated server. 

10. The apparatus of Claim 9, wherein said receiving device includes said 
notification receiving device. 
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11. The apparatus of Claim 9, further comprising an HTML interface on a 
computer desktop for managing said dedicated server via a Web browser. 

12. The apparatus of Claim 9, further comprising a send client application for 
delivering said at least one document as a single package from said desktop of 
a sending computer over said electronic network during a session. 

13. The apparatus of Claim 12, said send client application comprising: 

an application window for displaying a send client application interface, 
said application window comprising a tool bar for accessing main functions of 
said send client application, a package manager for listing all document 
activities initiated during a send client application session, and a menu listing 
operational commands for said send client application; 

a package window for specifying the parameters of said document 
delivery; and 

a storage module for configurably storing said document delivery 
parameters, wherein said document delivery is initiated using said stored 
document delivery parameters. 

14. The apparatus of Claim 24, further comprising a security framework for 
restricting access ;o said apparatus and/or said document. 

15. A method for aocument management and delivery on an electronic 
network, comprising the steps of: 

delivering at least one document as a single package from a sending 
computer to a dedicated server over an electronic network during a session 
using a send client application; 

storing said at least one document from said sending computer on said 
dedicated server; 

forwarding an electronic message to a receiving device from said 
dedicated server ; and 
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downloading said at least one stored document from said dedicated 
server using a receive client application on said receiving device, in response 
to the electronic message. 

16. The method of Claim 15, further comprising the step of: 

said sending computer desktop displaying an application window with a 
send client application interface having a tool bar for accessing main functions 
of said send client application, a package manager for listing all document 
activities initiated during said session, and a menu listing operational 
commands for said send client application. 

1 7. The method of Claim 40, comprising the step of: 

configurably storing, in a storage module, said specified document 
delivery parameters, wherein said document delivery is initiated using said 
stored document delivery parameters. 

1 8. The method of Claim 15, further comprising the step of: 

providing a security framework for restricting access to said system, said 
security framework supporting at least one of authentication layers, secure 
socket layers, password protection, private key encryption, public key 

encryption, and certificate authentication. 

19. The method of Claim 15, further comprising the step of: 

initiating said document delivery from the contents of an address book of 
a supported application on said sending computer. 

20. The method of Claim 15, comprising the step of: 

displaying a Configuration User Interface application window for 
managing said dedicated server on a computer desktop, said configuration user 
interface application window having a main tool bar for accessing main 
functions of said configuration user interface, a secondary tool bar for accessing 
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functions within said main functions, a workspace for displaying an interactive 
interface to an accessed function, and a menu listing operational commands for 
said configuration user interface. 

21. An apparatus for generating a digital certificate for a recipient by a 
sender, comprising: 

a sending computer for use by said sender; 
a receiving computer for use by said recipient; 
a database for storing recipient information; 

means for querying said database by said sender for said stored 
recipient information; 

means for gathering private recipient information from said recipient; 

means for comparing said gathered private recipient information and 
said stored recipient information; 

means for controllably generating a digital certificate comprising a public 
key and a private key at said receiving computer; 

means for storing said digital certificate; and 

means for transferring said public key to said sending computer. 

22. The apparatus of Claim 21 , further comprising: 

a server interposed between said sending computer and said receiving 

computer. 

23. The apparatus of Claim ??. v.n^rpin said database for storing recipient 
information is located on said server 

24. The apparatus of Claim 22 wherein said means lor querying said 
database by said sender for said stored recipient information is located on said 
server. 
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25. The apparatus of Claim 22, wherein said means for gathering private 
recipient information from said recipient is located on said server. 

26. The apparatus of Claim 22, wherein said means for comparing said 
gathered private recipient information and said stored recipient information is 
located on said server. 

27. The apparatus of Claim 22, wherein said means for storing said digital 
certificate is located on said server. 

28. The apparatus of Claim 21 , further comprising: 

a certificate digest comprising said stored recipient information and 
sender selectable options for said digital certificate. 

29. A method for generating a digital certificate for a recipient by a sender, 
comprising the steps of: 

querying a database for stored recipient information; 
gathering information from said recipient; 

comparing said gathered information with said queried, stored recipient 
information; 

selectively transferring software to said recipient based upon said 
comparison; and 

selectively generating said digital certificate at said recipient with said 
software, said digital certificate comprising a public key and a private key. 

30. The method of Claim 29, further comprising the step of: 
transferring a copy of said digital certificate to said sender. 

31 . The method of Claim 29, further comprising the step of: 
transferring a copy of said pubiic key to said sender. 
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32. The method of Claim 29, wherein said database for storing recipient 
information is located on a server. 

33. The method of Claim 29, wherein said step of querying said database is 
performed by a server. 

34. The method of Claim 29, wherein said step of gathering information from 
said recipient is performed by a server. 

35. The method of Claim 29, wherein said step of comparing said gathered 
information with said queried, stored recipient information is performed by a 
server. 

36. The method of Claim 29, further comprising the step of: 

generating a certificate digest . comprising said stored recipient 
information and sender selectable options for said digital certificate. 

37. An apparatus for controllably generating a digital certificate for a recipient 
by a sender, comprising: 

a sending computer for use by said sender; 

a receiving computer for use by said recipient; 
a database for storing recipient information; 
means for gathering information from said recipient; and 
means for controllably generating a digital certificate for said recipieni if 
said gathered information and said stored recipient information match. 

33. The apparatus of Claim 37, further comprising: 

a server interposed between said sending computer and said receiving 
computer. 
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39. The apparatus of Claim 38, wherein said database for storing recipient 
information is located on said server. 

40. The apparatus of Claim 38, wherein said means for gathering information 
from said recipient is located on said server. 

41. The apparatus of Claim 38, wherein said means for controllably 
generating a digital certificate is located on said server. 

42. The apparatus of Claim 38, wherein said means for controllably 
generating a digital certificate includes software that is downloadable from said 
server to said receiving computer. 

43. The apparatus of Claim 38, wherein said server includes means for 
storing said digital certificate. 

44. The apparatus of Claim 37, further comprising: 

a certificate digest comprising said stored recipient information and 
sender selectable options for said digital certificate. 
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ABSTRACT 

A method and apparatus are provided for securely delivering documents over 
an electronic network while preserving document formatting. The invention also 
provides security that restricts access to the system to an authorized user. A 
document is sent from a sending computer to a dedicated server, using a send 
client application. The document is specified for delivery within the send client 
application, or by clicking and dragging the document onto an appropriate 
window or icon on the sending computer desktop, or is specified from within a 
document authoring application. A dedicated server stores the document and 
forwards an electronic notification to a receiving device. The stored document 
is downloaded from the dedicated server, using a receive client application, in 
response to the notification. The receive client application permits the recipient 
to receive, view, print, and/or manipulate the document. The dedicated server is 
preferably managed by a configuration user interface having an HTML interface 
for sending, tracking, accessing account information, managing biilings, and 
managing mail distribution lists. The send client application allows a user to 
specify document delivery parameters. The parameters may be stored for later 
modification and/or use. A sender driven certificate enrollment system and 
methods of its use are also provided, in which a sender controls the generation 
of a digital certificate that is used to encrypt and send a document to a recipient 
in a secure manner. The sender compares previously stored recipient 
information to gathered information from the recipient. If the information 
matches, the sender transfers key generation software to the recipient, which 
produces the digital certificate, comprising a public and private key pair. The 
sender can then use the public key to encrypt and send the document to the 
recipient, wherein the recipient can use the matching private key to decrypt the 
document. 



